Dell issued a security update to patch a SupportAssist Client software vulnerability which allows potential unauthenticated attackers on the same Network Access layer to remotely execute arbitrary executables on vulnerable computers. The software flaw is tracked as CVE-2019-3719 and comes with a high severity CVSSv3 base score of 8.0 assigned by the National Vulnerability Database (NVD) Dell also fixed an improper origin validation flaw reported by security researcher John C. Hennessy-ReCar.
Source: https://www.bleepingcomputer.com/news/security/dell-computers-exposed-to-rce-attacks-by-supportassist-flaws/

