DSA-2023-148: Dell Command | Update, Dell Update, and Alienware Update Security Update for an InstallShield vulnerability
Summary: Dell Command | Update, Dell Update, and Alienware Update remediation is available for an InstallShield improper access control vulnerability that could be exploited by malicious users to compromise the affected system during installation ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Third-Party Component | CVE(s) | More information |
|---|---|---|
| InstallShield | CVE-2023-29080 | See NVD (http://nvd.nist.gov/ ), Flexera KB Article foradditional information |
| Third-Party Component | CVE(s) | More information |
|---|---|---|
| InstallShield | CVE-2023-29080 | See NVD (http://nvd.nist.gov/), Flexera KB Article for additional information |
Affected Products & Remediation
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell Command | Update |
4.8.0 and prior |
4.9.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Command | Update Application for Windows 10 | Driver Details Windows 32 and 64-bit versions for Microsoft Windows 10 Dell Command | Update Application | Driver Details |
| Dell Update / Alienware Update |
4.8.0 and prior |
4.9.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Update/Alienware Update Application for Windows 10 | Driver Details |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Dell Command | Update |
4.8.0 and prior |
4.9.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Command | Update Application for Windows 10 | Driver Details Windows 32 and 64-bit versions for Microsoft Windows 10 Dell Command | Update Application | Driver Details |
| Dell Update / Alienware Update |
4.8.0 and prior |
4.9.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Update/Alienware Update Application for Windows 10 | Driver Details |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-05-09 | Initial Release |
Acknowledgements
CVE-2023-29080: Dell Technologies would like to thank HackAndPwn for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Alienware Update, Dell Command | Update, Dell Update, Product Security InformationArticle Properties
Article Number: 000212577
Article Type: Dell Security Advisory
Last Modified: 09 May 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.