CVE-2019-18575

Dell Command Configure before version 4.2.1 is affected by an uncontrolled search path vulnerability. A locally authenticated attacker could abuse a symlink to a target file to overwrite or corrupt a specified file on the system. Impact is file overwrite/corruption within the context of the user ...

PT-2019-15528

Name of the Vulnerable Software and Affected Versions Dell Command Configure versions prior to 4.2.1 Description The issue allows a locally authenticated malicious user to exploit an uncontrolled search path vulnerability. This can be done by creating a symlink to a target file, enabling the...

CVE-2019-18575: Uncontrolled Search Path Element

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...

Dell Command Configure CVE-2019-18575 Arbitrary File Overwrite Vulnerability

Description Dell Command Configure is prone to an arbitrary file-overwrite vulnerability. Successful exploits may allow an attacker to write arbitrary files in the context of the user running the affected application. Dell Command Configure prior to 4.2.1 are vulnerable. Technologies Affected Del...

Dell Command Update Backlink Vulnerability

Dell Command Update is a tool from Dell USA for automating driver, BIOS and firmware updates in Dell products. A backlink vulnerability exists in versions prior to Dell Command Update 3.1, which can be exploited by a local attacker to delete arbitrary files by creating symbolic links...

Dell Command Update Arbitrary File Deletion Vulnerability

Dell Command Update is part of the Dell Client Command Suite and can be used to get all the latest driver, firmware and BIOS updates for Latitude, Optiplex and Precision systems. An arbitrary file deletion vulnerability exists in Dell Command Update versions prior to 3.1, which can be exploited b...

CVE-2019-3750

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...

CVE-2019-3749

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

CVE-2019-3749

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

CVE-2019-3750

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...

Arbitrary file deletion

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...

Arbitrary file deletion

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

CVE-2019-3749

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

CVE-2019-3750

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...

CVE-2019-3749

Dell Command Update (pre-3.1) is affected by an Arbitrary File Deletion vulnerability. A local authenticated attacker can delete arbitrary files by exploiting a symlink from Temp\ICProgress\Dell_InventoryCollector_Progress.xml to a target file, due to incorrect permissions on the Temp directory. ...

Dell Command Update DSA-2019-162 Multiple Arbitrary File Deletion Vulnerabilities

Description Dell Command Update is prone to multiple arbitrary-file-deletion vulnerabilities. Successfully exploiting these issues will allow attackers to delete arbitrary files in the context of the application. Dell Command Update version prior to 3.1 are vulnerable. Technologies Affected Dell...

PT-2019-16691

Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 3.1 Description The issue is related to an Arbitrary File Deletion problem. A local authenticated malicious user with low privileges could potentially exploit this to delete arbitrary files. This is achiev...

PT-2019-16690

Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 3.1 Description The issue allows a local authenticated malicious user with low privileges to potentially delete arbitrary files by creating a symlink from the "TempICProgressDell InventoryCollector...

CVE-2019-3749: Uncontrolled Search Path Element

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

CVE-2019-3750: Uncontrolled Search Path Element

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...