Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-23698

CVE-2023-23698

Description

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Dell Command Update (DCU)

Default version status: unaffected

  • Versions 4.6.0 and 4.7.1affected

References