CVE-2024-28962

Medium

Description

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

SeverityMedium

CVSS6.5

Exploit probability—

ProductDell Alienware Update

PublishedAug 6, 2024

First seenAug 6, 2024

Weakness typeCWE-610CWE-610

How to fix

Update

dell alienware_update5.4 or later
dell command_update5.4 or later
dell update5.4 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000227236/dsa-2024-169

Affected products

Product	Affected versions	Fixed in
dell alienware_update	v < 5.4	5.4
dell command_update	v < 5.4	5.4
dell update	v < 5.4	5.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.