Advisories · Technology
Dell Command Update (DCU).
Every CVE that names Dell Command Update (DCU) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Time-of-check time-of-use race condition in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Race condition
- CVSS 7.8 High
Incorrect default permissions in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Broken access control
- CVSS 6.5 Medium
XML external entity injection in Dell Command Update (DCU)
- Dell Command Update (DCU)
- XML external entities (XXE)
- CVSS 8.8 High
Missing authorization in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Broken access control
- CVSS 5.5 Medium
Incorrect authorization in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Broken access control
- CVSS 7.3 High
Missing authorization in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Broken access control
- CVSS 5.5 Medium
Dell Command Update (DCU): Dell Command Update (DCU), versions prior to 5.7.1…
- Dell Command Update (DCU)
- Information disclosure
- CVSS 7.3 High
Time-of-check time-of-use race condition in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Race condition
- CVSS 7.8 High
Deserialization of untrusted data in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Insecure deserialization
- CVSS 7.8 High
Deserialization of untrusted data in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Insecure deserialization
- CVSS 6.6 Medium
Symlink following in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Path traversal
- CVSS 6.7 Medium
Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.
- Dell Command Update (DCU)
- CWE-1386
- CVSS 6.3 Medium
Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.
- Dell Command Update (DCU)
- CWE-1386
- CVSS 4.7 Medium
Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.
- Dell Command Update (DCU)
- CWE-1386
- CVSS 5.5 Medium
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component.
- Dell Command Update (DCU)
- CWE-1386
- CVSS 6.6 Medium
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation…
- Dell Command Update (DCU)
- Information disclosure
- CVSS 7.8 High
Improper signature verification in Dell Command Update (DCU)
- Dell Command Update (DCU)
- Weak cryptography or TLS
- CVSS 7.8 High
Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration.
- Dell Command Update (DCU)
- CVSS 7.8 High
Uncontrolled search path in Dell Command Update (DCU)
- Dell Command Update (DCU)
- CWE-427
- CVSS 5.6 Medium
Uncontrolled search path in Dell Command Update (DCU)
- Dell Command Update (DCU)
- CWE-427
- CVSS 5.6 Medium
Uncontrolled search path in Dell Command Update (DCU)
- Dell Command Update (DCU)
- CWE-427