CVE-2024-52535
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 25, 2024
Updated: Jan 29, 2025
CWE ID 59
CWE ID 61
Summary
CVE-2024-52535 is a new vulnerability affecting Dell SupportAssist for Home PCs version 4.6.1 and prior, as well as Dell SupportAssist for Business PCs version 4.5.0 and prior. This issue involves a symbolic link (symlink) attack in the software remediation component. An authenticated user with low privileges can potentially exploit this vulnerability, resulting in privilege escalation and enabling arbitrary deletion of files and folders on the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Dell SupportAssist for Home PCs
- Dell SupportAssist for Business PCs
Affected Vendors
- Dell Technologies