CVE-2023-28065: medium-severity vulnerability in Dell Command Update (DCU)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Dell Command | Update and similar tools before version 4.8.1 create temporary files in an unsafe way that attackers with local access can manipulate to gain higher system privileges. This matters because it allows someone with a regular user account to run malicious code with administrator powers.
The vulnerability exists in insecure handling of Windows junction points and mount points during temporary file operations. A local attacker can leverage this to perform a privilege escalation attack by manipulating the junction/mount point before the application accesses it, potentially achieving system-level code execution.
In the same product, most dangerous first.