DSA-2023-170: Dell Command | Update, Dell Update, and Alienware Update Security Update for an Insecure Operation on Windows Junction / Mount Point vulnerability
Zhrnutie: Dell Command | Update, Dell Update, and Alienware Update remediation is available for an Insecure Operation on Windows Junction / Mount Point vulnerability that could be exploited by malicious users to compromise the affected system. ...
Tento článok sa vzťahuje na
Tento článok sa nevzťahuje na
Tento článok nie je viazaný na žiadny konkrétny produkt.
V tomto článku nie sú uvedené všetky verzie produktov.
Dosah
Medium
Podrobnosti
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-28071 | Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). |
6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-28071 | Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). |
6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H |
Dotknuté produkty a riešenie problému
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM-DD-YYY) / Expected Release | Update link |
| Dell Command | Update | SW | 4.9.0, A01 and Prior | 4.9.0, A02 | 6/13/2023 | Universal Windows Platform version for Windows 10 32-bit and 64-bit https://www.dell.com/support/home/drivers/DriversDetails?driverId=J6PNP |
| Windows 32 and 64-bit version for Microsoft Windows 10 https://www.dell.com/support/home/drivers/DriversDetails?driverId=30F6M |
|||||
| Dell Update / Alienware Update |
SW | 4.9.0, A01 and Prior | 4.9.0, A02 | 6/13/2023 | Universal Windows Platform version for Windows 10 32-bit and 64-bit https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=HF46K |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM-DD-YYY) / Expected Release | Update link |
| Dell Command | Update | SW | 4.9.0, A01 and Prior | 4.9.0, A02 | 6/13/2023 | Universal Windows Platform version for Windows 10 32-bit and 64-bit https://www.dell.com/support/home/drivers/DriversDetails?driverId=J6PNP |
| Windows 32 and 64-bit version for Microsoft Windows 10 https://www.dell.com/support/home/drivers/DriversDetails?driverId=30F6M |
|||||
| Dell Update / Alienware Update |
SW | 4.9.0, A01 and Prior | 4.9.0, A02 | 6/13/2023 | Universal Windows Platform version for Windows 10 32-bit and 64-bit https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=HF46K |
História revízií
| Revision | Date | Description |
| 1 | 2023-06-13 | Initial Release |
Potvrdenia
CVE-2023-28071: Dell Technologies would like to thank ycdxsb for reporting this issue.
Súvisiace informácie
Legal Disclaimer
Dotknuté produkty
Alienware Update, Dell Command | Update, Dell UpdateVlastnosti článku
Číslo článku: 000213546
Typ článku: Dell Security Advisory
Dátum poslednej úpravy: 13 jún 2023
Nájdite odpovede na svoje otázky od ostatných používateľov spoločnosti Dell
Služby podpory
Skontrolujte, či sa na vaše zariadenie vzťahujú služby podpory.