PT-2023-6776 · Dell · Dell Alienware Command Center

·

CVE-2023-24569

·

Published

2023-02-09

·

Updated

2023-02-17

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions 5.5.37.0 and prior
Description The issue is related to improper input validation. A local authenticated malicious user could potentially send malicious input to a named pipe in order to elevate privileges on the system.
Recommendations For versions 5.5.37.0 and prior, consider restricting access to the named pipe until a patch is available. As a temporary workaround, limit the privileges of users who have access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-07595
CVE-2023-24569

Affected Products

Dell Alienware Command Center