CVSS: 7.3EPSS: 0%CPEs: 4EXPL: 0CVE-2023-28065
https://notcve.org/view.php?id=CVE-2023-28065
Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation. • https://www.dell.com/support/kbdoc/en-us/000212574/dsa-2023-146 • CWE-59: Improper Link Resolution Before File Access ('Link Following') CWE-1386: Insecure Operation on Windows Junction / Mount Point •
CVSS: 7.1EPSS: 0%CPEs: 7EXPL: 0CVE-2023-28071
https://notcve.org/view.php?id=CVE-2023-28071
Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). • https://www.dell.com/support/kbdoc/en-us/000213546/dsa-2023-170-dell-command-update • CWE-59: Improper Link Resolution Before File Access ('Link Following') CWE-1386: Insecure Operation on Windows Junction / Mount Point •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2023-23698
https://notcve.org/view.php?id=CVE-2023-23698
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete. • https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031 • CWE-1386: Insecure Operation on Windows Junction / Mount Point •
CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0CVE-2022-34458
https://notcve.org/view.php?id=CVE-2022-34458
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data. • https://www.dell.com/support/kbdoc/en-us/000204950/dsa-2022-298 • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-34459
https://notcve.org/view.php?id=CVE-2022-34459
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution. • https://www.dell.com/support/kbdoc/en-us/000204950/dsa-2022-298 • CWE-347: Improper Verification of Cryptographic Signature •