CVE-2023-39249: Medium severity dell supportassist vulnerability
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39249?
CVE-2023-39249 has been classified as a medium severity vulnerability.
How do I fix CVE-2023-39249?
To fix CVE-2023-39249, update Dell SupportAssist for Business PCs to the latest version.
Who is affected by CVE-2023-39249?
CVE-2023-39249 affects local non-admin users of Dell SupportAssist for Business PCs version 3.4.0.
What type of vulnerability is CVE-2023-39249?
CVE-2023-39249 is a local Authentication Bypass vulnerability.
What can attackers do with CVE-2023-39249?
Attackers can exploit CVE-2023-39249 to gain temporary privileges within the SupportAssist User Interface.