Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing arbitrary dll's,
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
不可信的搜索路径
Vulnerability Title
SupportAssist Client 代码问题漏洞
Vulnerability Description
DELL Dell SupportAssist Client是美国戴尔（DELL）公司的一款客户端应用程序。该程序提供自动化、主动和预测性技术进行故障排除等。 SupportAssist Client 中存在代码问题漏洞，该漏洞源于产品中管理操作在加载文件时任意加载dll文件。攻击者可通过该漏洞执行任意文件。以下产品及版本受到影响：SupportAssist Client 3.8 及 3.9 版本。
CVSS Information
N/A
Vulnerability Type
N/A