CVE:CVE-2020-5316
CNNVD:CNNVD-202107-1734
DELL Dell SupportAssist for Business PCs和Dell SupportAssist for Home PCs都是美国戴尔（DELL）公司的产品。Dell SupportAssist for Business PCs是一款适用于企业电脑的客户端应用程序。该程序提供自动化、主动和预测性技术进行故障排除等。Dell SupportAssist for Home PCs是一款适用于家庭电脑的客户端应用程序。该程序提供自动化、主动和预测性技术进行故障排除等。
Dell SupportAssist for Business PCs和Dell SupportAssist for Home PCs存在代码问题漏洞，该漏洞本地身份验证的低特权用户可能利用此漏洞导致SupportAssist二进制文件加载任意dll，从而导致特权执行任意代码。
solution:Upgrade dell supportassist_for_business_pcs to a higher version than 2.0,2.0.1,2.0.2,2.1,2.1.1,2.1.2,2.1.3,and avoid the version 2.0,2.0.1,2.0.2,2.1,2.1.1,2.1.2,2.1.3; Upgrade dell supportassist_for_home_pcs to a higher version than 2.0,2.0.1,2.0.2,2.1,2.1.1,2.1.2,2.1.3,2.2,2.2.1,2.2.2,2.2.3,3.0,3.0.1,3.0.2,3.1,3.2,3.2.1,3.2.2,3.3,3.3.1,3.3.2,3.3.3,3.4,and avoid the version 2.0,2.0.1,2.0.2,2.1,2.1.1,2.1.2,2.1.3,2.2,2.2.1,2.2.2,2.2.3,3.0,3.0.1,3.0.2,3.1,3.2,3.2.1,3.2.2,3.3,3.3.1,3.3.2,3.3.3,3.4