CVE-2024-52535: High severity dell supportassist vulnerability
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability, gaining privileges escalation, leading to arbitrary deletion of files and folders from the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52535?
CVE-2024-52535 has been rated as a low severity vulnerability.
How do I fix CVE-2024-52535?
To mitigate CVE-2024-52535, update Dell SupportAssist for Home PCs to version 4.6.2 or later and for Business PCs to version 4.5.1 or later.
Who is affected by CVE-2024-52535?
CVE-2024-52535 affects users of Dell SupportAssist for Home PCs version 4.6.1 and earlier and Dell SupportAssist for Business PCs version 4.5.0 and earlier.
Can CVE-2024-52535 be exploited remotely?
CVE-2024-52535 requires a low-privileged authenticated user to exploit the vulnerability.
What is the nature of the vulnerability in CVE-2024-52535?
CVE-2024-52535 is a symbolic link (symlink) attack vulnerability found in the software remediation component of Dell SupportAssist.