CVE-2024-28962

Published: Aug 6, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Affected (3)

Products: Dell: Alienware Update, Command Update, Update

3 products

Alienware Update

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dell Alienware Update	Before 5.4
Dell Command Update	Before 5.4
Dell Update	Before 5.4

Related CWEs

Externally Controlled Reference to a Resource in Another Sphere

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

References (1)

https://www.dell.com/support/kbdoc/en-us/000227236/dsa-2024-169

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.