CVE-2019-3718 HIGH

CVE-2019-3718

Vendor Dell
Product SupportAssist Client
Published April 18, 2019
Last update September 16, 2024

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.

Key dates

02Disclosure timeline

April 18, 2019 CVE published
September 16, 2024 Record updated