5.6
Moyenne
CVE-2019-3749 Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability
Description
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\ICProgress\Dell_InventoryCollector_Progress.xml" to any targeted file. This issue occurs because permissions on the Temp directory were set incorrectly.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell Command Update (DCU) 3.1 | premières → < 3.1 | 3.1 |
Autres CVE de Dell Command Update (DCU)
Les 21 CVE de Dell Command Update (DCU) →
CVE-2026-53477
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition…
7.8
Élevée
CVE-2026-58564
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability
7.8
Élevée
CVE-2026-67268
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference…
6.5
Moyenne
CVE-2026-58565
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability
8.8
Élevée