ID

VAR-202404-3328


CVE

CVE-2024-22450


DESCRIPTION

Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise.

Trust: 1.0

sources: NVD: CVE-2024-22450

AFFECTED PRODUCTS

vendor:dellmodel:alienware command centerscope:gteversion:6.0

Trust: 1.0

vendor:dellmodel:alienware command centerscope:ltversion:6.2.7.0

Trust: 1.0

sources: NVD: CVE-2024-22450

CVSS

SEVERITY

CVSSV2

CVSSV3

security_alert@emc.com: CVE-2024-22450
value: HIGH

Trust: 1.0

nvd@nist.gov: CVE-2024-22450
value: HIGH

Trust: 1.0

security_alert@emc.com: CVE-2024-22450
baseSeverity: HIGH
baseScore: 7.4
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.4
impactScore: 5.9
version: 3.1

Trust: 1.0

nvd@nist.gov: CVE-2024-22450
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: NVD: CVE-2024-22450 // NVD: CVE-2024-22450

PROBLEMTYPE DATA

problemtype:CWE-427

Trust: 1.0

sources: NVD: CVE-2024-22450

EXTERNAL IDS

db:NVDid:CVE-2024-22450

Trust: 1.0

sources: NVD: CVE-2024-22450

REFERENCES

url:https://www.dell.com/support/kbdoc/en-us/000218222/dsa-2024-016-security-update-for-dell-alienware-command-center-vulnerabilities

Trust: 1.0

sources: NVD: CVE-2024-22450

SOURCES

db:NVDid:CVE-2024-22450

LAST UPDATE DATE

2025-02-01T23:05:59.773000+00:00


SOURCES UPDATE DATE

db:NVDid:CVE-2024-22450date:2025-01-31T17:10:53.323

SOURCES RELEASE DATE

db:NVDid:CVE-2024-22450date:2024-04-10T07:15:08.937