CVE-2023-23698

Published: Feb 10, 2023Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.

Affected (4)

Products: Dell: Alienware Update, Command Update

2 products

Alienware Update

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Alienware Update	Version 4.6.0
Dell Alienware Update	Version 4.7.1
Dell Command Update	Version 4.6.0
Dell Command Update	Version 4.7.1

Related CWEs

Insecure Operation on Windows Junction / Mount Point

The product opens a file or directory, but it does not properly prevent the name from being associated with a junction or mount point to a destination that is outside of the intended control sphere.

References (2)

https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.