PT-2023-6777 · Dell · Alienware Update+2

Ycdxsb · Publicado 2023-02-06 · Atualizado 2023-02-17 · CVE-2023-23698

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Command | Update versions prior to 4.6.0 Dell Update versions prior to 4.6.0 Alienware Update versions prior to 4.7.1

Description The issue is related to an insecure operation on Windows Junction in the installer component, which could be exploited by a local malicious user to delete arbitrary files.

Recommendations For Dell Command | Update versions prior to 4.6.0, update to version 4.6.0 or later. For Dell Update versions prior to 4.6.0, update to version 4.6.0 or later. For Alienware Update versions prior to 4.7.1, update to version 4.7.1 or later.

Correção

Insecure Operation on Windows Junction

Enumeração de Fraquezas

CWE-1386

Identificadores relacionados

BDU:2023-07596

CVE-2023-23698

Produtos afetados

Alienware Update

Dell Command | Update

Dell Update

Referências · 6

• https://bdu.fstec.ru/vul/2023-07596 · Nota de Segurança
• https://t.me/cibsecurity/57890 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-23698 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23698 · Aviso do Fabricante
• https://dell.com/support/kbdoc/en-us/000208038/dsa-2023-031 · Aviso do Fabricante
• https://t.me/cvenotify/44521 · Publicação no Telegram