Improper Access Control in Alienware Command Center Application by Dell
CVE-2023-28070

6.7MEDIUM

Key Information:

Vendor

Dell
Status
Alienware Command Center (awcc)
Vendor
CVE Published:
3 May 2023

What is CVE-2023-28070?

The Alienware Command Center Application, specifically versions up to 5.5.43.0, is susceptible to an improper access control vulnerability. This flaw can be exploited by a local malicious user during the installation or update processes, potentially leading to privilege escalation. Users are advised to review updates and apply security patches to mitigate possible threats.

Affected Version(s)

Alienware Command Center (AWCC) Version 5.5.43.0 and prior

References

https://www.dell.com/support/kbdoc/en-us/000212277/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.