Lucene search
+L

239 matches found

Cvelist
Cvelist
added 2023/11/23 6:27 a.m.26 views

CVE-2023-43086

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

7.3CVSS7.8AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/23 12:00 a.m.9 views

PT-2023-29191 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, which could be exploited by a local malicious standard user during the repair or change of installation, potentially leading to...

7.8CVSS7.5AI score0.00196EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/23 12:00 a.m.7 views

PT-2023-28690 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, allowing a local malicious user to potentially modify files inside the installation folder during an application upgrade. This cou...

7.8CVSS7.5AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/23 12:00 a.m.7 views

Dell Command | Monitor 安全漏洞

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...

7.8CVSS6.5AI score0.00196EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/23 12:00 a.m.8 views

PT-2023-29192 · Dell · Dell Command | Monitor

Name of the Vulnerable Software and Affected Versions: Dell Command | Monitor versions prior to 10.10.0 Description: The issue is related to improper access control. A local malicious standard user could potentially exploit this, leading to privilege escalation during the process of repairing or...

7.8CVSS7.7AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/23 12:00 a.m.7 views

Dell Command | Configure Security Vulnerability

Dell Command | Configure is an application from Dell USA that provides configuration capabilities for business client platforms. The program contains both a command line interface and a graphical user interface for configuring various BIOS features. A security vulnerability exists in Dell Command...

7.8CVSS7.1AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/23 12:00 a.m.7 views

Dell Command | Configure Security Vulnerability

Dell Command | Configure is an application from Dell USA that provides configuration capabilities for business client platforms. The program contains both a command line interface and a graphical user interface for configuring various BIOS features. A security vulnerability exists in Dell Command...

7.8CVSS6.9AI score0.00219EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.12 views

The vulnerability of the Dell Command | Update, Dell Update, and Alienware Update software relates to a insecure operation at the mount point in the Windows operating system. This allows an attacker to delete arbitrary files.

The vulnerability of the Dell Command | Update, Dell Update, and Alienware Update programs is related to a unsafe operation at the mount point in the Windows operating system. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

7.1CVSS7.2AI score0.00176EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:00 a.m.12 views

The vulnerability of the automation software for installing, deploying, monitoring, and managing Dell Command | Integration Suite for System Center lies in the incorrect handling of links before accessing files. This allows a malicious individual to delete any files they desire.

The vulnerability of the software used for automating the installation, deployment, monitoring, and management of Dell Command | Integration Suite for System Center is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow an attacker t...

4.7CVSS5.4AI score0.00173EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:00 a.m.13 views

The vulnerability of the Dell Command | Monitor software, which manages various computer parameters, stems from lack of access control mechanisms. This allows attackers to delete any files they desire.

The vulnerability of the Dell Command | Monitor software, which allows for monitoring and controlling various computer parameters, is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete arbitrary files...

7.1CVSS7.2AI score0.00155EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/06/23 12:15 p.m.6 views

CVE-2023-28065

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation...

7.3CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/23 12:15 p.m.26 views

Privilege escalation

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation...

4.1CVSS7.1AI score0.00193EPSS
SaveExploits0References1Affected Software3
NVD
NVD
added 2023/06/23 11:15 a.m.28 views

CVE-2023-28071

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Servi...

7.1CVSS6.5AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/23 11:15 a.m.11 views

CVE-2023-28071

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Servi...

7.1CVSS5.9AI score0.00179EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/23 11:15 a.m.24 views

Design/Logic Flaw

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Servi...

3.2CVSS6.9AI score0.00179EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2023/06/23 10:37 a.m.44 views

CVE-2023-28071

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Servi...

6.3CVSS7.1AI score0.00179EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/23 12:00 a.m.11 views

PT-2023-21533 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior Description: The issue is related to an Insecure Operation on Windows Junction / Mount Point, which could be exploited by a local malicious user to create...

7.1CVSS6.8AI score0.00179EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/23 12:00 a.m.11 views

部分Dell产品 后置链接漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in...

7.3CVSS7.4AI score0.00193EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/23 12:00 a.m.11 views

PT-2023-21527 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior Description: The issue is related to an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit thi...

7.3CVSS7.1AI score0.00193EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/06/23 12:00 a.m.10 views

Dell Command Update 后置链接漏洞

Dell Command Update is a tool from Dell USA used to automatically update drivers, BIOS and firmware in Dell products. A security vulnerability exists in Dell Command Update, Dell Update, Alienware Update version 4.9.0 and prior versions. An attacker could exploit the vulnerability to create...

7.1CVSS7.3AI score0.00179EPSS
SaveExploits0References2
Rows per page
Query Builder