PT-2025-35600 · Dell · Dell Alienware Command Center

Published 2025-09-02 · Updated 2025-11-04 · CVE-2025-43726

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions prior to 5.10.2.0

Description The software flaw in Dell Alienware Command Center relates to incorrect handling of symbolic links before file access. Exploitation may allow an attacker to gain elevated privileges. A local attacker with low privileges could potentially exploit this issue, leading to privilege escalation. The issue is described as an Improper Link Resolution Before File Access, also known as a 'Link Following' issue.

Recommendations Update Dell Alienware Command Center to version 5.10.2.0 or later.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2025-10896

CVE-2025-43726

Affected Products

Dell Alienware Command Center

References · 6

• https://dell.com/support/kbdoc/en-us/000361664/dsa-2025-336 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43726 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10896 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-43726 · Security Note
• https://t.me/cveNotify/141594 · Telegram Post
• https://twitter.com/CVEnew/status/1962952357190214087 · Twitter Post