Lucene search

DellCVE-2024-28962

HistoryAug 06, 2024 - 4:16 a.m.

CVE-2024-28962

2024-08-0604:16:45

CWE-610

dell

web.nvd.nist.gov

dell update

alienware update

vulnerability

denial of service

unauthenticated attacker

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

dellalienware_updateRange<5.4

dellcommand_updateRange<5.4

dellupdateRange<5.4

VendorProductVersionCPE
dellalienware_update*cpe:2.3:a:dell:alienware_update:*:*:*:*:*:*:*:*
dellcommand_update*cpe:2.3:a:dell:command_update:*:*:*:*:*:*:*:*
dellupdate*cpe:2.3:a:dell:update:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	alienware_update	*	cpe:2.3:a:dell:alienware_update::::::::
dell	command_update	*	cpe:2.3:a:dell:command_update::::::::
dell	update	*	cpe:2.3:a:dell:update::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Update (DU)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "5.4",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000227236/dsa-2024-169

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-28962