DSA-2025-336: Security Update for Dell Alienware Command Center 5.x for an Improper Link Resolution Before File Access Vulnerability
Summary: Dell Alienware Command Center 5.x remediation is available for Improper Link Resolution Before File Access vulnerability that could be exploited by malicious users to compromise the affected system. ...
Impact
Medium
Details
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-43726 |
Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access ('Link Following')" vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. |
6.7 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-43726 |
Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access ('Link Following')" vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. |
6.7 |
Affected Products & Remediation
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
Dell Alienware Command Center 5.x (AWCC) |
Software |
Versions prior to 5.10.2.0 |
Version 5.10.2.0 or later |
|
|
Dell Alienware Command Center 5.x (AWCC) |
Software |
Versions prior to 5.10.2.0 |
Version 5.10.2.0 or later |
Alienware Command Center 5.x - Full Installer | Driver Details |
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
Dell Alienware Command Center 5.x (AWCC) |
Software |
Versions prior to 5.10.2.0 |
Version 5.10.2.0 or later |
|
|
Dell Alienware Command Center 5.x (AWCC) |
Software |
Versions prior to 5.10.2.0 |
Version 5.10.2.0 or later |
Alienware Command Center 5.x - Full Installer | Driver Details |
Revision History
|
Revision |
Date |
Description |
|
1.0 |
2025-09-02 |
Initial Release |
Acknowledgements
Dell Technologies would like to thank falconCorrup for reporting this issue.