What is CVE-2023-44283?

CVE-2023-44283 is a high-severity vulnerability in Dell Supportassist For Business Pcs, classified under Improper Access Control. CVSS score: 7.8/10. Published 2024-02-14.

How severe is CVE-2023-44283?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Dell Supportassist For Business Pcs

CVE-2023-44283

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

EPSS: 0.002 (14.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Supportassist For Business Pcs — versions 0
Dell Supportassist_for_business_pcs
Dell Supportassist For Home Pcs — versions 0
Dell Supportassist_for_home_pcs

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-44283?: CVE-2023-44283 is a high-severity vulnerability in Dell Supportassist For Business Pcs, classified under Improper Access Control. CVSS score: 7.8/10. Published 2024-02-14.
How severe is CVE-2023-44283?: High severity. CVSS v3 base score is 7.8 out of 10.