medium5.5
CVE-2023-23698
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer compon…
Impact
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Update | Versions 4.6.0, 4.7.1 |
| Dell | Command Update | Versions 4.6.0, 4.7.1 |