Lucene search
+L

340 matches found

Positive Technologies
Positive Technologies
•added 2022/06/23 12:00 a.m.•22 views

PT-2022-6316 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command Configure versions 4.8 and prior Description: The issue is related to improper folder permission handling when Dell Command Configure is installed to a non-default, non-secured path. This can lead to privilege escalation, allowin...

7.8CVSS7.5AI score0.00205EPSS
SaveExploits0References7
OSV
OSV
•added 2022/04/01 8:15 p.m.•13 views

CVE-2022-24426

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS7.1AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/01 8:15 p.m.•38 views

CVE-2022-24426

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS0.0024EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/01 8:15 p.m.•25 views

Privilege escalation

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.2CVSS7.5AI score0.0024EPSS
SaveExploits0References1Affected Software3
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•5 views

PT-2022-16688

Name of the Vulnerable Software and Affected Versions Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.5 Description A Local Privilege Escalation issue exists in the Advanced Driver Restore component, allowing a local malicious user to potentially exploit this issue an...

7.8CVSS0.0024EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/01 12:00 a.m.•6 views

CVE-2022-24426: Uncontrolled Search Path Element

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS7.3AI score0.0024EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/01 12:00 a.m.•13 views

多款Dell产品代码问题漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in...

7.8CVSS7.5AI score0.0024EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/25 12:00 a.m.•11 views

CVE-2022-24426

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

7.8CVSS7.1AI score0.0024EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/08/09 9:15 p.m.•16 views

CVE-2021-36277

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system...

7.8CVSS7.3AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/09 9:15 p.m.•27 views

CVE-2021-36277

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system...

7.8CVSS0.00171EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/09 9:15 p.m.•24 views

Input validation

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system...

7.2CVSS7.7AI score0.00171EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2021/08/09 9:05 p.m.•32 views

CVE-2021-36277

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system...

7.8CVSS7.9AI score0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/09 12:00 a.m.•17 views

PT-2021-21194 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.3 Description: The issue is related to an improper verification of cryptographic signatures, allowing a local authenticated malicious user to exploit the vulnerabili...

7.8CVSS7.7AI score0.00171EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/09 12:00 a.m.•4 views

CVE-2021-36277: Improper Verification of Cryptographic Signature

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system...

7.8CVSS6AI score0.00171EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/09 12:00 a.m.•19 views

Dell Command Update 数据伪造问题漏洞

Dell Command Update is a tool from Dell USA used to automatically update drivers, BIOS and firmware in Dell products. A data forgery vulnerability exists in Dell Command Update, Dell Update, and Alienware Update 4.3 and earlier versions. An attacker could exploit this vulnerability to modify loca...

7.8CVSS7.7AI score0.00171EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/09 12:00 a.m.•17 views

Dell Command Configure Code Issue Vulnerability

Dell Command Configure is a Dell USA application that provides configuration capabilities for business client platforms. The program contains both a command line interface and a graphical user interface for configuring a variety of BIOS features. A code issue vulnerability exists in Dell Command...

7.1CVSS7.2AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/06 9:15 p.m.•15 views

CVE-2019-18575

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...

7.1CVSS5.8AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/06 9:15 p.m.•44 views

CVE-2019-18575

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...

7.1CVSS6.8AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/06 9:15 p.m.•28 views

Design/Logic Flaw

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...

6.6CVSS6.8AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/06 8:40 p.m.•45 views

CVE-2019-18575

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...

7.1CVSS6.8AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder