CVE-2019-3750

CVE-2019-3750 affects Dell Command Update versions prior to 3.1. The issue arises from insecure handling of Temp permissions, enabling a locally authenticated, low-privilege attacker to delete arbitrary files by creating a symlink from Temp\IC\ICDebugLog.txt to a target file. Impact: arbitrary fi...

CVE-2019-3749

Dell Command Update (pre-3.1) is affected by an Arbitrary File Deletion vulnerability. A local authenticated attacker can delete arbitrary files by exploiting a symlink from Temp\ICProgress\Dell_InventoryCollector_Progress.xml to a target file, due to incorrect permissions on the Temp directory. ...