What is CVE-2019-12280?

CVE-2019-12280 is a high-severity vulnerability in Dell Supportassist For Business Pcs, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-06-25.

How severe is CVE-2019-12280?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2019-12280 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Dell Supportassist For Business Pcs

CVE-2019-12280

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.

Published 2019-06-25 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.021 (80.9th percentile), scored 2026-10-01.

Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 80.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: 0.000

Affected products

Dell Supportassist For Business Pcs — versions 2.0.1
Dell Supportassist For Home Pcs — versions 3.2.2
Pc-Doctor Toolbox

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

Public proof-of-concept exploits

References

seclists.org/fulldisclosure/2019/Jun/29 (mailing-list, Mailing List, Third Party Advisory)
packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html (VDB Entry, Third Party Advisory)
www.securityfocus.com/bid/108880 (VDB Entry, Third Party Advisory, vdb-entry)
www.pc-doctor.com/company/pr-articles/130-pc-doctor-responds-to-software-vulner… (Vendor Advisory)
www.us-cert.gov/ncas/current-activity/2019/06/21/Dell-Releases-Security-Advisor… (US Government Resource, VDB Entry, Third Party Advisory)
safebreach.com/Press-Post/SafeBreach-Identifies-Serious-Vulnerability-In-PC-Doc… (Third Party Advisory)
seclists.org/fulldisclosure/2019/Jun/29 (Mailing List, Third Party Advisory)
www.dell.com/support/article/il/en/ilbsdt1/sln317291/dsa-2019-084-dell-supporta… (Third Party Advisory)

Frequently asked questions

What is CVE-2019-12280?: CVE-2019-12280 is a high-severity vulnerability in Dell Supportassist For Business Pcs, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-06-25.
How severe is CVE-2019-12280?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2019-12280 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.