CVE-2023-28071

6.3MEDIUM

Key Information:

Vendor
Dell
Status
Dell Command Update (dcu)
Vendor
CVE Published:
23 June 2023

Summary

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS).

Affected Version(s)

Dell Command Update (DCU) Dell Command | Update 4.9.0, A01 and Prior

References

https://www.dell.com/support/kbdoc/en-us/000213546/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.