Exposed Dangerous Method or Function Vulnerability Risking Denial of Service
CVE-2024-28962

7.5HIGH

Key Information:

Vendor
Dell
Status
Dell Update (du)
Vendor
CVE Published:
6 August 2024

Summary

Dell Command | Update, Dell Update, and Alienware Update UWP prior to version 5.4 are susceptible to an Exposed Dangerous Method or Function vulnerability. This flaw allows unauthenticated attackers with remote access to potentially exploit the vulnerability, which could result in denial of service conditions. Users are encouraged to update to the latest versions to mitigate any potential exploits.

Affected Version(s)

Dell Update (DU) < 5.4

References

https://www.dell.com/support/kbdoc/en-us/000227236/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank Skyler Ferrante for reporting this issue.
.