Vulnerabilities > Dell > Command Update > 4.6.0

DATE CVE VULNERABILITY TITLE RISK
2023-06-23 CVE-2023-28065 Link Following vulnerability in Dell Alienware Update, Command Update and Update
Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.
local
low complexity
dell CWE-59
7.3
2023-06-23 CVE-2023-28071 Link Following vulnerability in Dell Alienware Update, Command Update and Update
Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.
local
low complexity
dell CWE-59
7.1
2023-02-10 CVE-2023-23698 Unspecified vulnerability in Dell Alienware Update and Command Update
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component.
local
low complexity
dell
7.1
2023-02-01 CVE-2022-34458 Unspecified vulnerability in Dell Alienware Update, Command Update and Update
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component.
local
low complexity
dell
5.5
2023-02-01 CVE-2022-34459 Improper Verification of Cryptographic Signature vulnerability in Dell Alienware Update, Command Update and Update
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component.
local
low complexity
dell CWE-347
7.8