Dell Update vulnerabilities

8 CVEs affecting Dell Update, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28962, published 2024-08-06.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-28962, published 2024-08-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access…
• CVE-2022-24426, published 2022-04-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could…
• CVE-2022-34384, published 2023-02-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5…
• CVE-2022-34382, published 2022-09-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may…
• CVE-2023-28065, published 2023-06-23. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could…
• CVE-2022-34458, published 2023-02-01. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download…
• CVE-2023-28071, published 2023-06-23. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could…
• CVE-2022-34459, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user…