CVE-2023-28065
Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation.
Published:Jun 23, 2023
Last Modified:Dec 4, 2024
EPS:Jun 23, 2023
EPSS Score:0.00057
CVSS Score:6.7
Affected Products
Vendor
Product
Action
Vendor
Dell
Product
Alienware Update
Dell
Alienware Update
Vendor
Dell
Product
Command Update
Dell
Command Update
Vendor
Dell
Product
Update
Dell
Update
Vendor
Microsoft
Product
Windows
Microsoft
Windows
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
