CVE-2021-21518

dell supportassist client promanage, dell supportassist for business pcs, dell supportassist for home pcs

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-21518

Katalog CVE

CVSS 7.8 · High EPSS 0,35%

Kerentanan Uncontrolled Search Path Element pada dell supportassist client promanage, dell supportassist for business pcs +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x contain a DLL injection vulnerability in the Costura Fody plugin. A local user with low privileges could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with SYSTEM privileges.

Rincian

Terbit di NVD
12 Maret 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-427: Uncontrolled Search Path Element
EPSS (30 hari)
0,35% peluang dieksploitasi; lebih tinggi dari 26,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell supportassist client promanage Versi 1.0
dell supportassist for business pcs Versi 2.0.0
dell supportassist for business pcs Versi 2.1.0
dell supportassist for business pcs Versi 2.2.0
dell supportassist for home pcs Versi 3.3.3
dell supportassist for home pcs Versi 3.4.0
dell supportassist for home pcs Versi 3.6.0
dell supportassist for home pcs Versi 3.7.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.