Start a Conversation

Unsolved

126

September 7th, 2023 07:43

9 Legend

 • 

47K Posts

September 9th, 2019 08:00

If your system is not end of life and still supported you uninstall the program and reinstall it from the Dell Site.

https://www.dell.com/support/contents/us/en/04/article/product-support/self-support-knowledgebase/software-and-downloads/supportassist?dgc=SM&cid=304177&lid=spr2631574547&linkId=73515902

DSA Identifier: DSA-2019-051

CVE Identifier: CVE-2019-3718, CVE-2019-3719

Severity: High

Severity Rating: CVSS Base Score: See below for NVD Scores

Affected products:

Dell SupportAssist Client versions prior to 3.2.0.90.

Summary:

Dell SupportAssist Client has been updated to address multiple vulnerabilities which may be potentially exploited to compromise the system.

Details:

Improper Origin Validation (CVE-2019-3718)

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.

CVSSv3 Base Score: 7.6 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H)

Remote Code Execution Vulnerability (CVE-2019-3719)

Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.

CVSSv3 Base Score: 7.1 (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)

Resolution:

The following Dell SupportAssist Client release contains resolutions to these vulnerabilities:

  • Dell SupportAssist Client version 3.2.0.90 and later.

Dell recommends all customers upgrade at the earliest opportunity.

Link to remedies:

Customers can download software from https://downloads.dell.com/serviceability/Catalog/SupportAssistInstaller.exe

1 Message

September 10th, 2019 00:00

If you mean the Support Assist desktop icon which (probably) went away when an updated version of SA was installed on your system then the following steps should work.

      1.  Bring up the program list by either pressing the Windows key or clicking the Windows icon in the lower left corner of the screen.

       2.  In the program list find the small icon for "Support Assist".  There may be one near the top of the list in the "Recently added" program section.  If there is not one there then look in the "S" section for "Support Assist".  Right click on the icon or the program name.

       3.  Select the "Pin to Start" option by clicking on it.

       4.  Find the newly added  "Support Assist" icon in the Start Menu.  Left click on that icon and, while holding down the left mouse button, drag the icon to a convenient open space on the desktop.  Release the mouse button and you will have created a "Support Assist" link / shortcut on the desktop.  (The "Support Assist" icon in the Start Menu will still be in the Start Menu.  You can either "unpin" it or keep it there for future use, as you choose.)

       5.  The next time Support Assist is updated or reinstalled the desktop icon will probably disappear and sometimes the one in the Start Menu will go also, but it's easy enough to recreate.

 

 

Moderator

 • 

17K Posts

September 11th, 2019 07:00

Silverchix,

 

You can click here to download the Support assist application. You can also search the Windows Store for Support Assist version 3.3

 

 

 

Moderator

 • 

17K Posts

September 12th, 2019 10:00

Silverchix,

 

Did you get Support  Assist installed?

 

 

28 Posts

September 13th, 2019 03:00

You could also create a shortcut (set it to Run as Adminstrator) - "C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistUI.exe" Launch

 

 

No Events found!

Top