Critical Dell SupportAssist CVE-2024-28956 Vulnerability Allows Code Execution

Key Takeaways

• Dell has addressed a critical vulnerability, CVE-2024-28956, in its SupportAssist for Business PCs.
• This flaw, affecting versions prior to 3.14.0, could enable unauthenticated attackers to execute arbitrary code remotely with elevated privileges.
• The vulnerability carries a CVSS score of 9.6, indicating severe risk.
• Organizations utilizing Dell SupportAssist for Business PCs are urged to update to version 3.14.0 or later immediately.

Critical Dell SupportAssist Vulnerability Poses Remote Code Execution Risk

Dell has issued an urgent security update for its SupportAssist for Business PCs software, addressing a critical vulnerability, CVE-2024-28956, that could allow remote code execution. The flaw impacts all versions of the utility preceding 3.14.0, and Dell strongly advises users to upgrade without delay.

The company’s security advisory, DSA-2026-324, details the high-severity issue. SupportAssist for Business PCs is a diagnostics and support tool pre-installed on many Dell business systems, making its security crucial for maintaining endpoint integrity across enterprise environments.

Unauthenticated Remote Code Execution Threat

Designated CVE-2024-28956, this critical vulnerability boasts a CVSS score of 9.6, reflecting its severe potential impact. Dell identifies it as an arbitrary file write vulnerability, a type of flaw where an attacker can write data to arbitrary locations on the file system.

The severity is compounded by the fact that an unauthenticated remote attacker could exploit this weakness. This means an adversary could leverage the vulnerability over a network without needing any prior authentication credentials or access to the compromised system. Successful exploitation could lead to arbitrary code execution with SYSTEM privileges, granting the attacker complete control over the affected machine.

Dell credited security researcher Ori Gabriel for discovering and reporting this critical flaw. The advisory does not provide specific technical details regarding the exploit chain or vulnerable file paths, but the potential for unauthenticated remote code execution underscores the urgency of patching.

What You Should Do

• Immediately identify all Dell business PCs running SupportAssist.
• Verify the installed version of Dell SupportAssist for Business PCs.
• Upgrade any installations running versions prior to 3.14.0 to the latest available version (3.14.0 or newer).
• Obtain the necessary update directly from the official Dell download page.
• Regularly review Dell’s security advisories for ongoing updates and best practices.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.