CVE-2023-28071 - Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability

Back Back to CVE browser

HIGH

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability

Published Jun 23, 2023

7.1

HIGH

CVSS 3.1

EPSS 0.18%

Description

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS).

Affected products

Vendor Dell Product Dell Command Update (DCU) Default
unaffected
- Version
  4.9.0, A01 and Prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Dell Command Update (DCU)

unaffected

Version	Status	Constraints
4.9.0, A01 and Prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1386

CWE-59

References (1)

https://www.dell.com/support/kbdoc/en-us/000213546/dsa-2023-170-dell-command-update
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/en-us/000213546/dsa-2023-170-dell-command-update		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Jun 23, 2023

Updated Nov 7, 2024

Reserved Mar 10, 2023

Link CVE-2023-28071

CISA Vulnrichment

Updated Nov 7, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-28071

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-28071