Dell SupportAssist Client Consumer 3.4.0 insufficient permissions or privileges

Summaryinfo

A vulnerability was found in Dell SupportAssist Client Consumer 3.4.0. It has been classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to insufficient permissions or privileges. This vulnerability is uniquely identified as CVE-2023-39249. Local access is required to approach this attack. No exploit exists.

Detailsinfo

A vulnerability was found in Dell SupportAssist Client Consumer 3.4.0. It has been rated as problematic. This issue affects an unknown code block. The manipulation with an unknown input leads to a insufficient permissions or privileges vulnerability. Using CWE to declare the problem leads to CWE-280. The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.

The weakness was disclosed 02/14/2024. It is possible to read the advisory at dell.com. The identification of this vulnerability is CVE-2023-39249 since 07/26/2023. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 02/14/2024). The attack technique deployed by this issue is T1222 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Dell

Name

• SupportAssist Client Consumer

Version

• 3.4.0

License

• commercial

Website

• Vendor: https://www.dell.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion