CVE-2024-52535

Name of the Vulnerable Software and Affected Versions Dell SupportAssist for Home PCs versions 4.6.1 and prior Dell SupportAssist for Business PCs versions 4.5.0 and prior

Description The software remediation component of Dell SupportAssist contains a symbolic link attack vulnerability. A low-privileged authenticated user could exploit this vulnerability, gaining privilege escalation, which could lead to the arbitrary deletion of files and folders from the system.

Recommendations For Dell SupportAssist for Home PCs versions 4.6.1 and prior, update to a version later than 4.6.1 to resolve the issue. For Dell SupportAssist for Business PCs versions 4.5.0 and prior, update to a version later than 4.5.0 to resolve the issue. As a temporary workaround, consider restricting access to the software remediation component until a patch is available.