Lucene search

[email protected]CVE-2023-28072

HistorySep 04, 2023 - 4:15 p.m.

CVE-2023-28072

2023-09-0416:15:07

CWE-502

[email protected]

web.nvd.nist.gov

dell

alienware

command center

cve-2023-28072

deserialization

vulnerability

.net

remoting

security

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting server to run arbitrary code on the system.

Affected configurations

NVD

Node

dellalienware_command_centerRange<5.5.51.0

CPENameOperatorVersion
dell:alienware_command_centerdell alienware command centerlt5.5.51.0

CPE	Name	Operator	Version
dell:alienware_command_center	dell alienware command center	lt	5.5.51.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Alienware Command Center (AWCC)",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 5.5.51.0"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-in/000212982/dsa-2023-158

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Related for CVE-2023-28072

prion1 cvelist1 nvd1