CVE-2019-3726

🗓️ 24 Sep 2019 15:31:31Reported by dellType

Uncontrolled Search Path Vulnerability in Dell Update Package (DUP) Framewor

Reporter	Title	Published	Views	Family All 6
CNVD	Dell Update Package Framework Code Issue Vulnerability	25 Sep 201900:00	–	cnvd
Cvelist	CVE-2019-3726	24 Sep 201915:31	–	cvelist
EUVD	EUVD-2019-13361	7 Oct 202500:30	–	euvd
NVD	CVE-2019-3726	24 Sep 201916:15	–	nvd
OSV	CVE-2019-3726	24 Sep 201916:15	–	osv
Prion	Design/Logic Flaw	24 Sep 201916:15	–	prion

NVD

Vulners

Node

dell update_package_frameworkRange<3.8.3.67

AND

dell client_platformsMatch-

Node

dell update_package_frameworkRange<103.4.6.69

AND

dell emc_serversMatch-

Node

dell update_package_frameworkRange<19.1.0.413

AND

dell emc_serversMatch-

[
  {
    "product": "Dell EMC Servers: Networking and Fibre Channel Drivers: Dell Update Package (DUP) Framework file",
    "vendor": "Dell EMC",
    "versions": [
      {
        "lessThan": "103.4.6.69",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Dell EMC Servers: all other Drivers, BIOS and Firmware: Dell Update Package (DUP) Framework file",
    "vendor": "Dell EMC",
    "versions": [
      {
        "lessThan": "19.1.0.413",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Dell Client Platforms: Dell Update Packages (DUP) Framework file",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "3.8.3.67",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/article/SLN318693

21 Nov 2024 04:42Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.2

CVSS 3.16.7

CVSS 36.7

EPSS0.0014

CWE-427