CVE-2023-28065

🗓️ 23 Jun 2023 11:04:35Reported by dellType

Dell Command | Update, Dell Update, and Alienware Update version 4.8.0 and prior contain Insecure Operation on Windows Junction / Mount Point vulnerability

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-28065	23 Jun 202316:46	–	circl
CNNVD	部分Dell产品后置链接漏洞	23 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-28065	23 Jun 202311:04	–	cvelist
EUVD	EUVD-2023-31790	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28065	23 Jun 202312:15	–	nvd
OSV	CVE-2023-28065	23 Jun 202312:15	–	osv
Prion	Privilege escalation	23 Jun 202312:15	–	prion
Positive Technologies	PT-2023-21527 · Dell · Alienware Update +2	23 Jun 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-28065	23 Jun 202311:04	–	vulnrichment

NVD

Vulners

Node

dell alienware_updateRange<4.9.0

dell command_updateRange<4.9.0

dell updateRange<4.9.0

AND

microsoft windowsMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Dell Update /\r\nAlienware Update",
      "Dell Command | Update"
    ],
    "product": "Dell Command Update (DCU)",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "4.8.0 and prior"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000212574/dsa-2023-146

21 Nov 2024 07:54Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.7 - 7.3

EPSS0.00069

SSVC