{"api_version":"1","generated_at":"2026-07-23T10:22:04+00:00","cve":"CVE-2019-3718","urls":{"html":"https://cve.report/CVE-2019-3718","api":"https://cve.report/api/cve/CVE-2019-3718.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-3718","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-3718"},"summary":{"title":"CVE-2019-3718","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","state":"PUBLIC","assigner":"security_alert@emc.com","published_at":"2019-04-18 20:29:00","updated_at":"2023-02-10 02:21:00"},"problem_types":["CWE-352"],"metrics":[],"references":[{"url":"http://www.securityfocus.com/bid/108020","name":"108020","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","name":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","refsource":"MISC","tags":["Vendor Advisory"],"title":"DSA-2019-051: Dell SupportAssist Client Multiple Vulnerabilities | Dell India","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3718","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3718","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"LEGACY","value":"Dell would like to thank John C. Hennessy-ReCar for reporting CVE-2019-3718.","lang":""}],"nvd_cpes":[{"cve_year":"2019","cve_id":"3718","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dell","cpe5":"supportassist","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"3718","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dell","cpe5":"supportassist","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security_alert@emc.com","DATE_PUBLIC":"2019-04-17T17:04:00.000Z","ID":"CVE-2019-3718","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SupportAssist Client","version":{"version_data":[{"version_affected":"<","version_value":"3.2.0.90"}]}}]},"vendor_name":"Dell"}]}},"credit":[{"lang":"eng","value":"Dell would like to thank John C. Hennessy-ReCar for reporting CVE-2019-3718."}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems."}]},"generator":{"engine":"Vulnogram 0.0.6"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Origin Validation"}]}]},"references":{"reference_data":[{"refsource":"MISC","url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","name":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en"},{"refsource":"BID","name":"108020","url":"http://www.securityfocus.com/bid/108020"}]},"source":{"discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2019-04-18 20:29:00","lastModifiedDate":"2023-02-10 02:21:00","problem_types":["CWE-352"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:dell:supportassist:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.0.90","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"3718","Ordinal":"141327","Title":"CVE-2019-3718","CVE":"CVE-2019-3718","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"3718","Ordinal":"1","NoteData":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","Type":"Description","Title":null},{"CveYear":"2019","CveId":"3718","Ordinal":"2","NoteData":"2019-04-18","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"3718","Ordinal":"3","NoteData":"2019-04-22","Type":"Other","Title":"Modified"}]}}}