CVE-2023-28072

Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting server to run arbitrary code on the system.

Score

CVSS 3.1 7.8 High

Status

Modified - security_alert@emc.com

Published

2023-09-04

Last modified

2024-09-30

Weaknesses

CWE-502

Affected products

• Alienware Command Center (Dell)
• Alienware Command Center Awcc (Dell)

References

• https://www.dell.com/support/kbdoc/en-in/000212982/dsa-2023-158