CVE-2023-28065

6.7MEDIUM

Key Information:

Vendor
Dell
Status
Dell Command Update (dcu)
Vendor
CVE Published:
23 June 2023

Summary

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation.

Affected Version(s)

Dell Command Update (DCU) 4.8.0 and prior

References

https://www.dell.com/support/kbdoc/en-us/000212574/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.