DSA-2022-074: Dell Command | Update and Dell Update, and Alienware Update Security Update for a Local Privilege Escalation Vulnerability
概要: Dell Command | Update and Dell Update, and Alienware Update remediation is available for a Local Privilege Escalation Vulnerability that may be exploited by malicious users to compromise the affected system. ...
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
High
詳細
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24426 | Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation. | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24426 | Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation. | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
影響を受ける製品と修復
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell Command | Update |
4.4.0 |
4.5.0 |
Universal Windows Platform version for Windows 10, 32 and 64 bit Dell Command | Update Application for Windows 10 | Driver Details | Dell US Windows 32 and 64-bit version for Microsoft Windows 7, 8, 8.1, and 10 Dell Command | Update Application | Driver Details | Dell US |
| Dell Update and Alienware Update |
4.4.0 |
4.5.0 |
Universal Windows Platform version for Windows 10, 32 and 64 bit Dell Update/Alienware Update Application for Windows 10 | Driver Details | Dell US Windows 32 and 64-bit version for Microsoft Windows 7, 8, 8.1, and 10 Dell Update/Alienware Update Application | Driver Details | Dell US |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell Command | Update |
4.4.0 |
4.5.0 |
Universal Windows Platform version for Windows 10, 32 and 64 bit Dell Command | Update Application for Windows 10 | Driver Details | Dell US Windows 32 and 64-bit version for Microsoft Windows 7, 8, 8.1, and 10 Dell Command | Update Application | Driver Details | Dell US |
| Dell Update and Alienware Update |
4.4.0 |
4.5.0 |
Universal Windows Platform version for Windows 10, 32 and 64 bit Dell Update/Alienware Update Application for Windows 10 | Driver Details | Dell US Windows 32 and 64-bit version for Microsoft Windows 7, 8, 8.1, and 10 Dell Update/Alienware Update Application | Driver Details | Dell US |
変更履歴
| Revision | Date | Description |
| 1.0 | 2022-03-25 | Initial Release |
| 1.1 | 2022-05-20 | CVE Description correction: only version 4.4.0 is affected |
確認
Dell would like to thank Alexander Pudwill for reporting this issue.
関連情報
法的免責事項
対象製品
Alienware Update, Dell Command | Update, Dell Update, Product Security Information文書のプロパティ
文書番号: 000197723
文書の種類: Dell Security Advisory
最終更新: 18 9月 2025
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。