CVE-2019-3718: Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability.

Security readout for executives and security teams

Dell SupportAssist Client before 3.2.0.90 failed to properly validate request origins. A remote unauthenticated attacker could try to trick an impacted user into a CSRF action. The issue is high severity because the published score includes possible availability impact, but exploitation still requires user interaction. Exposure is limited to systems running Dell SupportAssist Client earlier than 3.2.0.90. The bundle does not identify server products, specific operating systems, or deployment counts, so asset inventory and endpoint software version checks are required. Treat this as a high-priority endpoint hygiene issue, especially in Dell-heavy fleets. It is not confirmed actively exploited in the provided sources, but the low-complexity remote CSRF profile and high CVSS score justify timely remediation. Mitigation focus: Upgrade Dell SupportAssist Client to 3.2.0.90 or later.; Check Dell advisory DSA-2019-051 for current vendor guidance.; Prioritize managed endpoints where SupportAssist is broadly installed..

Prepared

May 24, 2026, 01:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.