DSA-2023-135: Alienware Command Center Security Update for a Local Privilege Escalation Vulnerability
摘要: Alienware Command Center remediation is available for a Local Privilege Escalation vulnerability that could be exploited by malicious users to compromise the affected system.
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
Medium
详情
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-28070 | Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A local malicious user could potentially exploit this vulnerability during installation or update process leading to privilege escalation. |
6.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-28070 | Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A local malicious user could potentially exploit this vulnerability during installation or update process leading to privilege escalation. |
6.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H See NVD (http://nvd.nist.gov/) for additional details. |
受影响的产品和补救措施
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Alienware Command Center | Version 5.5.43.0 and prior. | 5.5.46.0 |
Alienware Command Center for Windows 11 and Windows 10 64-bit at Dell Support Drivers & Downloads |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Alienware Command Center | Version 5.5.43.0 and prior. | 5.5.46.0 |
Alienware Command Center for Windows 11 and Windows 10 64-bit at Dell Support Drivers & Downloads |
解决方法和缓解措施
None.
修订历史记录
| Revision | Date | Description |
| 1.0 | 2023-04-24 | Initial Release |
确认
CVE-2023-28070: Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
相关信息
法律免责声明
受影响的产品
Alienware Command Center, Product Security Information文章属性
文章编号: 000212277
文章类型: Dell Security Advisory
上次修改时间: 09 6月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。