Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-36297

SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing arbitrary dll's,

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell SupportAssist Client Consumer

  • 3.8, 3.9affected

References