Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability, gaining privileges escalation, leading to arbitrary deletion of files and folders from the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@VoidMandoMain @dalpyash I actually went through the effort to figure out what DBUtilDrv2.sys is referring to. It's the driver for some Dell PC bloatware that EAC has blacklisted, since it is a privilage escalation vulnerability (CVE-2024-52535). It affects versions of the home eddition up to 4.6.1 iirc.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dell | supportassist_for_business_pcs | - | - | - |
| App | dell | supportassist_for_home_pcs | - | - | - |