DSA-2023-135: Alienware Command Center Security Update for a Local Privilege Escalation Vulnerability

Samenvatting: Alienware Command Center remediation is available for a Local Privilege Escalation vulnerability that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.

Impact

Medium

Gegevens

Proprietary Code CVE(s) Description CVSS Base Score            CVSS Vector String
CVE-2023-28070 Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A local malicious user could potentially exploit this vulnerability during installation or update process leading to privilege escalation.

6.7

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

See NVD (http://nvd.nist.gov/)This hyperlink is taking you to a website outside of Dell Technologies. for additional details.
Proprietary Code CVE(s) Description CVSS Base Score            CVSS Vector String
CVE-2023-28070 Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A local malicious user could potentially exploit this vulnerability during installation or update process leading to privilege escalation.

6.7

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

See NVD (http://nvd.nist.gov/)This hyperlink is taking you to a website outside of Dell Technologies. for additional details.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Affected Version(s) Updated Version(s) Link to Update
Alienware Command Center Version 5.5.43.0 and prior. 5.5.46.0
 
Alienware Command Center for Windows 11 and Windows 10 64-bit at Dell Support Drivers & Downloads
Product Affected Version(s) Updated Version(s) Link to Update
Alienware Command Center Version 5.5.43.0 and prior. 5.5.46.0
 
Alienware Command Center for Windows 11 and Windows 10 64-bit at Dell Support Drivers & Downloads

Tijdelijke oplossingen en risicobeperking

None.

Revisiegeschiedenis

RevisionDateDescription
1.02023-04-24Initial Release

Bevestigingen

CVE-2023-28070: Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
 

Verwante informatie

Getroffen producten

Alienware Command Center, Product Security Information
Artikeleigenschappen
Artikelnummer: 000212277
Artikeltype: Dell Security Advisory
Laatst aangepast: 09 jun. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.