CVE-2024-38305

CVSS V2 None CVSS V3 None

Description

Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the installer. A local low-privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executables on the operating system with elevated privileges.

Overview

CVE ID
CVE-2024-38305

Assigner
dell

Vulnerability Status
PUBLISHED

Published Version
2024-08-21T01:54:46.614Z

Last Modified Date
2024-08-21T01:54:46.614Z

Weakness Enumerations

CWE	URL
CWE-426	http://cwe.mitre.org/data/definitions/426.html

References

Reference URL	Reference Tags
https://www.dell.com/support/kbdoc/en-us/000227899/dsa-2024-312-security-update-for-dell-supportassist-for-home-pcs-installer-file-local-privilege-escalation-vulnerability	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-38305
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38305

History

Created	Old Value	New Value	Data Type	Notes
2024-08-21 13:24:31				Added to TrackCVE