High-Severity Vulnerability Found in Dell SupportAssist: CVE-2024-52535

A newly disclosed vulnerability, CVE-2024-52535, has been identified in Dell’s widely used SupportAssist software. This high-severity flaw could allow attackers to escalate privileges on affected systems, posing a significant threat to system integrity and operational continuity.

Vulnerability Details

CVE-2024-52535 affects both Dell SupportAssist for Home PCs and Business PCs. The vulnerability arises from a symbolic link (symlink) attack in the software’s remediation component. Exploiting this flaw, a low-privileged authenticated user could:

• Gain elevated privileges.
• Perform arbitrary deletions of files or folders.
• Compromise critical system files, potentially rendering the system inoperable.

Key Metrics

• CVSS Base Score: 7.1 (High Severity)
• Vector String:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
  • Attack Vector (AV): Local, requiring physical or network access to the device.
  • Privileges Required (PR): Low, making it easier to exploit.
  • Impact: High integrity and availability impact, though no direct confidentiality breach.

This vulnerability highlights a significant risk due to its ease of exploitation combined with its potential for severe damage.

Affected Products and Versions

The following SupportAssist products and versions are affected:

Product	Vulnerable Versions	Fixed Versions
SupportAssist for Home PCs	Versions prior to 4.6.2	4.6.2 or later
SupportAssist for Business PCs	Versions prior to 4.5.1	4.5.1 or later

Dell has released remediated versions of the software, which are available for download through the official Dell SupportAssist portals:

• Home PCs
• Business PCs

Mitigation Steps

To address the risks posed by CVE-2024-52535, Dell users should take immediate action:

1. Update Your Software:
   • Install the latest version of SupportAssist:
     • Version 4.6.2 or later for Home PCs.
     • Version 4.5.1 or later for Business PCs.
2. Enhance Access Controls:
   • Limit user privileges to reduce exposure to attacks.
   • Review access logs and monitor for suspicious activity, particularly on systems running affected versions.
3. Practice Regular Security Hygiene:
   • Regularly check for software updates.
   • Apply security patches promptly to prevent exploitation of known vulnerabilities.

Conclusion

CVE-2024-52535 underscores the importance of vigilance and proactive security management. While the vulnerability poses a significant risk, Dell’s timely disclosure and release of updated software provide users with the tools to mitigate the threat effectively.

By updating SupportAssist and maintaining robust security practices, users can protect their systems and minimize the likelihood of exploitation. For further information, visit Dell’s official advisory.