{"id":"CVE-2024-28962","state":"PUBLISHED","title":"Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with","description":"Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.","publishedAt":"2024-08-06T03:59:10.203Z","updatedAt":"2024-08-06T13:33:00.521Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","source":"dell"},"assigner":"dell","products":["Dell Dell Update (DU)"],"affected":[{"vendor":"Dell","product":"Dell Update (DU)","defaultStatus":"unaffected","versions":[{"version":"N/A","status":"affected","lessThan":"5.4","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000227236/dsa-2024-169"],"weaknesses":["CWE-610"],"ingestedAt":"2026-10-29T20:07:10.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/28xxx/CVE-2024-28962.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-28962","state":"PUBLISHED","datePublished":"2024-08-06T03:59:10.203Z","dateUpdated":"2024-08-06T13:33:00.521Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2024-03-13T15:42:12.960Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service."}],"affected":[{"vendor":"Dell","product":"Dell Update (DU)","defaultStatus":"unaffected","versions":[{"version":"N/A","status":"affected","lessThan":"5.4","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000227236/dsa-2024-169","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-610","description":"CWE-610: Externally Controlled Reference to a Resource in Another Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2024-08-06T03:59:10.203Z"},"credits":[{"lang":"en","type":"finder","value":"Dell Technologies would like to thank Skyler Ferrante for reporting this issue."}],"datePublic":"2024-08-05T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"dell","product":"command_update","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.4","versionType":"semver"}],"cpes":["cpe:2.3:a:dell:command_update:*:*:*:*:*:*:*:*"]},{"vendor":"dell","product":"update","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.4","versionType":"semver"}],"cpes":["cpe:2.3:a:dell:update:*:*:*:*:*:*:*:*"]},{"vendor":"dell","product":"alienware_update","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.4","versionType":"semver"}],"cpes":["cpe:2.3:a:dell:alienware_update:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-06T13:18:26.953734Z","id":"CVE-2024-28962","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-06T13:33:00.521Z"}}]}}}