Dell SupportAssist | Security Update for PC Doctor Vulnerability

DSA-2019-084: Dell SupportAssist for Business PCs and Dell SupportAssist for Home PCs Security Update for PC Doctor Vulnerability

DSA Identifier: DSA-2019-084

CVE Identifier: CVE-2019-12280

Severity: High

Severity Rating: CVSS v3 Base Score: See NVD (http://nvd.nist.gov/) for individual scores for each CVE

Affected Products:

Dell SupportAssist for Business PCs version 2.0

Dell SupportAssist for Home PCs version 3.2.1 and all prior versions

Summary:

Dell SupportAssist for Business PCs and Dell SupportAssist for Home PCs require an update to the latest versions to address a security vulnerability within the PC Doctor component.

Details:

The PC Doctor component in Dell SupportAssist for Business Systems and Dell SupportAssist for Home PCs has been updated for the following vulnerability:
PC Doctor CVE-2019-12280

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search.

Resolution:

The following Dell SupportAssist for Business Systems and Dell SupportAssist for Home PCs release contains a resolution to this vulnerability:
Dell SupportAssist for Business PCs version 2.0.1
Dell SupportAssist for Home PCs version 3.2.2

Dell recommends all customers update at the earliest opportunity.

Method 1: Auto Update

Dell SupportAssist for Business PCs and Dell SupportAssist for Home PCs automatically upgrade to the latest versions available, if automatic updates are enabled.

Method 2: Manual Update

To update manually, download and install the latest product version from:

Dell SupportAssist for Business PCs
https://downloads.dell.com/serviceability/Catalog/SupportAssistx64.msi
https://downloads.dell.com/serviceability/Catalog/SupportAssistx86.msi

Dell SupportAssist for Home PCs
https://downloads.dell.com/serviceability/catalog/SupportAssistInstaller.exe

Please visit https://www.dell.com/support/home?app=drivers for updates on the applicable products.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS and firmware updates automatically once available.


Credit:

Dell would like to thank Peleg Hadar for reporting this vulnerability.