CVE-2023-28071

Summary

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS).

Affected Software

VendorProductVersion RangeStatus
DellDell Command Update (DCU)4.9.0, A01 and Prioraffected

Weaknesses

  • CWE-1386: CWE-1386: Insecure Operation on Windows Junction / Mount Point

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References