GCVE - cpe:2.3:a:dell:command\|configure:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:command\|configure:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Command\|Configure (`2da78d77-87f3-584b-b775-99c1c365c4f7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-44289`	vulnerable	2026-06-08 06:12:39.926400	Details available HIGH (7.3) Dell Command \| Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation. Published: 2023-11-23T06:41:33.931Z Updated: 2025-06-05T14:11:38.414Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-dell-command-monitor-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-43086`	vulnerable	2026-06-08 06:11:10.882307	Details available HIGH (7.3) Dell Command \| Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation. Published: 2023-11-23T06:27:19.920Z Updated: 2024-08-02T19:37:23.064Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000218424/dsa-2023-387-security-update-for-a-dell-command-configure-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34457`	vulnerable	2026-06-08 05:44:53.569808	Details available HIGH (7.3) Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and able to make application unavailable for all users. Published: 2023-01-18T11:38:57.154Z Updated: 2025-04-03T18:05:33.209Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000205633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18575`	vulnerable	2026-06-08 05:13:11.648439	Details available HIGH (7.1) Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system. Published: 2019-12-06T20:40:13.655Z Updated: 2024-09-17T01:25:33.000Z Open on db.gcve.eu Reference links https://www.dell.com/support/article/SLN319715	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.