MEDIUM🇬🇧 English

CVE-2023-23698

CVSS 5.5v3.1pub. 2023-02-10upd. 2024-11-21

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Dell Alienware Update

    APP
    Dell
    4.6.04.7.1

  • Dell Command Update

    APP
    Dell
    4.6.04.7.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-34384HIGH7.8ten sam produkt

Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 a...

CVE-2022-34459HIGH7.8ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verificatio...

CVE-2022-34382HIGH7.8ten sam produkt

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escal...

CVE-2022-24426HIGH7.8ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation V...

CVE-2024-28962MEDIUM6.5ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Danger...