DSA-2023-031: Dell Command | Update, Dell Update, and Alienware Update Security Update for a Windows Universal Application Vulnerability
摘要: Dell Command | Update, Dell Update, and Alienware Update remediation is available for a Windows Universal Application vulnerability that may be exploited by malicious users to compromise the affected systems. ...
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
Medium
详情
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23698 | Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete. | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H  See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23698 | Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete. | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H See NVD (http://nvd.nist.gov/) for additional details. |
受影响的产品和补救措施
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell Command | Update |
Versions 4.6.0 and 4.7.1 |
4.8.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Command | Update Application for Windows 10 | Driver Details | Dell US |
| Dell Update, Alienware Update |
Versions 4.6.0 and 4.7.1 | 4.8.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Update, Alienware Update Application for Windows 10 | Driver Details | Dell US |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell Command | Update |
Versions 4.6.0 and 4.7.1 |
4.8.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Command | Update Application for Windows 10 | Driver Details | Dell US |
| Dell Update, Alienware Update |
Versions 4.6.0 and 4.7.1 | 4.8.0 |
Universal Windows Platform version for Windows 10 32-bit and 64-bit Dell Update, Alienware Update Application for Windows 10 | Driver Details | Dell US |
修订历史记录
| Revision | Date | Description |
| 1.0 | 2023-02-06 | Initial Release |
确认
CVE-2023-23698: Dell Technologies would like to thank ycdxsb for reporting this issue.
相关信息
法律免责声明
受影响的产品
Dell Command | Update, Product Security Information文章属性
文章编号: 000208038
文章类型: Dell Security Advisory
上次修改时间: 06 2月 2023
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。