Lucene search
DellCVELIST:CVE-2021-36277HistoryAug 09, 2021 - 9:05 p.m.
CVE-2021-36277
2021-08-0921:05:34
CWE-347
dell
www.cve.org
2
dell command
dell update
alienware update
cryptographic signature
vulnerability
local authentication
arbitrary code
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system.
CNA Affected
[
{
"product": "Alienware Command Center (AWCC)",
"vendor": "Dell",
"versions": [
{
"lessThan": "4.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Input validation
2021-08-09 21:15:00
nvd
nvd
CVE-2021-36277
2021-08-09 21:15:08
cve
cve
CVE-2021-36277
2021-08-09 21:15:08
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2021-36277