PT-2024-2775 · Dell · Dell Alienware Command Center

Published 2024-04-10 · Updated 2025-01-31 · CVE-2024-22450

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions prior to 6.2.7.0

Description The issue is related to an uncontrolled search path element, which could allow a local malicious user to inject malicious files into the file search path. This could lead to system compromise. Exploitation of the vulnerability may enable an attacker to execute arbitrary code by injecting specially crafted files into the search path.

Recommendations For versions prior to 6.2.7.0, update to version 6.2.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the file search path to minimize the risk of exploitation. Avoid using the vulnerable search path functionality until the issue is resolved.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2024-02913

CVE-2024-22450

Affected Products

Dell Alienware Command Center

References · 6

• https://dell.com/support/kbdoc/en-us/000218222/dsa-2024-016-security-update-for-dell-alienware-command-center-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22450 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22450 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02913 · Security Note
• https://t.me/cvenotify/109482 · Telegram Post
• https://twitter.com/CVEnew/status/1778118979711553568 · Twitter Post