Dell Command Update (Dcu)

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS).

Published: 2023-06-23T10:37:19.968Z
Updated: 2024-11-07T20:53:38.146Z

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation.

Published: 2023-06-23T11:04:35.789Z
Updated: 2024-12-04T14:42:45.835Z

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.

Published: 2023-02-10T12:20:09.940Z
Updated: 2025-03-24T18:36:40.449Z

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.

Published: 2023-02-13T07:24:11.185Z
Updated: 2025-03-21T14:50:26.922Z

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.

Published: 2023-02-01T04:28:20.334Z
Updated: 2025-03-27T14:08:56.088Z