CVE-2020-5316
First published: Thu Jul 22 2021(Updated: )
Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an uncontrolled search path vulnerability. A locally authenticated low privileged user could exploit this vulnerability to cause the loading of arbitrary DLLs by the SupportAssist binaries, resulting in the privileged execution of arbitrary code.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell SupportAssist for Business PCs | =2.0 | |
| Dell SupportAssist for Business PCs | =2.0.1 | |
| Dell SupportAssist for Business PCs | =2.0.2 | |
| Dell SupportAssist for Business PCs | =2.1 | |
| Dell SupportAssist for Business PCs | =2.1.1 | |
| Dell SupportAssist for Business PCs | =2.1.2 | |
| Dell SupportAssist for Business PCs | =2.1.3 | |
| Dell SupportAssist for Home PCs | =2.0 | |
| Dell SupportAssist for Home PCs | =2.0.1 | |
| Dell SupportAssist for Home PCs | =2.0.2 | |
| Dell SupportAssist for Home PCs | =2.1 | |
| Dell SupportAssist for Home PCs | =2.1.1 | |
| Dell SupportAssist for Home PCs | =2.1.2 | |
| Dell SupportAssist for Home PCs | =2.1.3 | |
| Dell SupportAssist for Home PCs | =2.2 | |
| Dell SupportAssist for Home PCs | =2.2.1 | |
| Dell SupportAssist for Home PCs | =2.2.2 | |
| Dell SupportAssist for Home PCs | =2.2.3 | |
| Dell SupportAssist for Home PCs | =3.0 | |
| Dell SupportAssist for Home PCs | =3.0.1 | |
| Dell SupportAssist for Home PCs | =3.0.2 | |
| Dell SupportAssist for Home PCs | =3.1 | |
| Dell SupportAssist for Home PCs | =3.2 | |
| Dell SupportAssist for Home PCs | =3.2.1 | |
| Dell SupportAssist for Home PCs | =3.2.2 | |
| Dell SupportAssist for Home PCs | =3.3 | |
| Dell SupportAssist for Home PCs | =3.3.1 | |
| Dell SupportAssist for Home PCs | =3.3.2 | |
| Dell SupportAssist for Home PCs | =3.3.3 | |
| Dell SupportAssist for Home PCs | =3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Dell SupportAssist vulnerability?
The vulnerability ID for this Dell SupportAssist vulnerability is CVE-2020-5316.
What is the severity of CVE-2020-5316?
The severity of CVE-2020-5316 is high (7.8).
Which software versions are affected by CVE-2020-5316?
Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 are affected by CVE-2020-5316.
How can I fix CVE-2020-5316?
To fix CVE-2020-5316, Dell has released a security advisory and patch, which you can find at the following link: http://www.dell.com/support/article/SLN320101
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-5316?
The Common Weakness Enumeration (CWE) ID for CVE-2020-5316 is 427.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell supportassist for business pcs
- version/dell supportassist for business pcs/2.0
- version/dell supportassist for business pcs/2.0.1
- version/dell supportassist for business pcs/2.0.2
- version/dell supportassist for business pcs/2.1
- version/dell supportassist for business pcs/2.1.1
- version/dell supportassist for business pcs/2.1.2
- version/dell supportassist for business pcs/2.1.3
- canonical/dell supportassist for home pcs
- version/dell supportassist for home pcs/2.0
- version/dell supportassist for home pcs/2.0.1
- version/dell supportassist for home pcs/2.0.2
- version/dell supportassist for home pcs/2.1
- version/dell supportassist for home pcs/2.1.1
- version/dell supportassist for home pcs/2.1.2
- version/dell supportassist for home pcs/2.1.3
- version/dell supportassist for home pcs/2.2
- version/dell supportassist for home pcs/2.2.1
- version/dell supportassist for home pcs/2.2.2
- version/dell supportassist for home pcs/2.2.3
- version/dell supportassist for home pcs/3.0
- version/dell supportassist for home pcs/3.0.1
- version/dell supportassist for home pcs/3.0.2
- version/dell supportassist for home pcs/3.1
- version/dell supportassist for home pcs/3.2
- version/dell supportassist for home pcs/3.2.1
- version/dell supportassist for home pcs/3.2.2
- version/dell supportassist for home pcs/3.3
- version/dell supportassist for home pcs/3.3.1
- version/dell supportassist for home pcs/3.3.2
- version/dell supportassist for home pcs/3.3.3
- version/dell supportassist for home pcs/3.4