DSA-2024-169: Security Update for Dell Command | Update, Dell Update, and Alienware Update for an Exposed Dangerous Method or Function Vulnerability
概要: Dell Command | Update, Dell Update and Alienware Update remediation is available for an Exposed Dangerous Method or Function vulnerability that could be exploited by malicious users to compromise the affected system. ...
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Medium
詳細
| Proprietary Code CVEs |
Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-28962 | Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. | 6.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
| Proprietary Code CVEs |
Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-28962 | Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. | 6.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
影響を受ける製品と修復
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell Command | Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit and 64-bit Dell Command | Update Windows Universal Application | Driver Details |
| Dell Command | Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11 ARM64 Dell Command | Update Windows Universal Application | Driver Details |
| Dell Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit and 64-bit Dell Update Windows Universal Application | Driver Details |
| Alienware Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit, 64-bit Dell/Alienware Update Application | Driver Details |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell Command | Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit and 64-bit Dell Command | Update Windows Universal Application | Driver Details |
| Dell Command | Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11 ARM64 Dell Command | Update Windows Universal Application | Driver Details |
| Dell Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit and 64-bit Dell Update Windows Universal Application | Driver Details |
| Alienware Update | Application | Versions prior to 5.4 | Version 5.4 and later | 07/31/2024 | Universal Windows Platform version for Windows 11, Windows 10 32-bit, 64-bit Dell/Alienware Update Application | Driver Details |
回避策と緩和策
None
変更履歴
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-08-05 | Initial Release |
| 2.0 | 2024-08-06 | Updated for enhanced presentation with no changes to content. |
確認
CVE-2024-28962: Dell Technologies would like to thank Skyler Ferrante for reporting this issue.
関連情報
法的免責事項
対象製品
Alienware Update, Dell Command | Update, Dell Update文書のプロパティ
文書番号: 000227236
文書の種類: Dell Security Advisory
最終更新: 06 8月 2024
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。