Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:07
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete. |
16 Feb 2023, 21:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:dell:alienware_update:4.6.0:*:*:*:*:*:*:* cpe:2.3:a:dell:alienware_update:4.7.1:*:*:*:*:*:*:* cpe:2.3:a:dell:command_update:4.7.1:*:*:*:*:*:*:* cpe:2.3:a:dell:command_update:4.6.0:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-Other | |
| First Time |
Dell command Update
Dell Dell alienware Update |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
10 Feb 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-10 13:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-23698
Mitre link : CVE-2023-23698
CVE.ORG link : CVE-2023-23698
JSON object : View
Products Affected
dell
- command_update
- alienware_update