7.1
High
CVE-2019-18575 Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability
Description
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Configure (DCC) 4.2 | earliest → < 4.2.1 | 4.2.1 |
Other CVEs of Dell Command Configure (DCC)
The 4 CVEs of Dell Command Configure (DCC) →
CVE-2023-44289
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability
7.3
High
CVE-2023-43086
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability
7.3
High
CVE-2022-34457
Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default…
7.3
High