CVE-2020-5316

HIGH

7.8

CVSS Score

Published: July 22, 2021 at 05:00 PM UTC

Updated: June 17, 2026 at 03:21 AM UTC

3 products affected across 1 vendorSupportAssist for Home PCsSupportAssist for Business PCsSupportAssist

Using Dell SupportAssist Client by Dell?

Get instant alerts when new vulnerabilities affect Dell SupportAssist Client - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

Description

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an uncontrolled search path vulnerability. A locally authenticated low privileged user could exploit this vulnerability to cause the loading of arbitrary DLLs by the SupportAssist binaries, resulting in the privileged execution of arbitrary code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

SupportAssist for Business PCs · Dell

95%

2.0 2.0.1 2.0.2 2.1 2.1.1 2.1.2 2.1.3

SupportAssist for Home PCs · Dell

95%

2.0 2.0.1 2.0.2 2.1 2.1.1 2.1.2 2.1.3 2.2 2.2.1 2.2.2 2.2.3 3.0 3.0.1 3.0.2 3.1 3.2 3.2.1 3.2.2 3.3 3.3.1 3.3.2 3.3.3 3.4

SupportAssist · Dell

60%

v < Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1

Affected range stops below Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1, so it looks safe — our inference, not a vendor statement