Common Weakness Enumeration

CWE-59

Allowed

Improper Link Resolution Before File Access ('Link Following')

Abstraction: Base · Status: Draft

API response cwe.mitre.org

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

2452 vulnerabilities reference this CWE, most recent first.

CVE-2024-1329 (GCVE-0-2024-1329)

Vulnerability from cvelistv5 – Published: 2024-02-08 19:20 – Updated: 2024-09-26 17:05
VLAI
Title
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
Summary
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.
Severity
7.7 (High)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-17 19:54 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access (Link Following)
Assigner
HashiCorp CNA under the mitre root
CNA scorecard C 70/100 over 41 records in the last 180 days details
References
Impacted products
Vendor Product Version
HashiCorp Nomad Affected: 0 , ≤ 1.5.13 (semver)
Affected: 0 , ≤ 1.6.6 (semver)
Affected: 0 , ≤ 1.7.3 (semver)
Create a notification for this product.
HashiCorp Nomad Enterprise Affected: 0 , ≤ 1.5.13 (semver)
Affected: 0 , ≤ 1.6.6 (semver)
Affected: 0 , ≤ 1.7.3 (semver)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-1329",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T19:54:48.732815Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-17T19:54:54.788Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:33:25.694Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "64 bit",
            "32 bit",
            "x86",
            "ARM",
            "MacOS",
            "Windows",
            "Linux"
          ],
          "product": "Nomad",
          "repo": "https://github.com/hashicorp/nomad",
          "vendor": "HashiCorp",
          "versions": [
            {
              "lessThanOrEqual": "1.5.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "1.6.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "1.7.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "64 bit",
            "32 bit",
            "x86",
            "ARM",
            "MacOS",
            "Windows",
            "Linux"
          ],
          "product": "Nomad Enterprise",
          "repo": "https://github.com/hashicorp/nomad",
          "vendor": "HashiCorp",
          "versions": [
            {
              "lessThanOrEqual": "1.5.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "1.6.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "1.7.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eHashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.\u003c/p\u003e\u003cbr/\u003e"
            }
          ],
          "value": "HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-132",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-132: Symlink Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (Link Following)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-26T17:05:43.601Z",
        "orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
        "shortName": "HashiCorp"
      },
      "references": [
        {
          "url": "https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack"
        }
      ],
      "source": {
        "advisory": "HCSEC-2024-03",
        "discovery": "INTERNAL"
      },
      "title": "Nomad Vulnerable to Arbitrary Write Through Symlink Attack"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
    "assignerShortName": "HashiCorp",
    "cveId": "CVE-2024-1329",
    "datePublished": "2024-02-08T19:20:10.831Z",
    "dateReserved": "2024-02-07T19:00:15.653Z",
    "dateUpdated": "2024-09-26T17:05:43.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0206 (GCVE-0-2024-0206)

Vulnerability from cvelistv5 – Published: 2024-01-09 12:56 – Updated: 2025-04-17 17:54
VLAI
Summary
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn't normally have permission to. After a scan, the Engine would follow the links and remove the files
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-01-10 18:33 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
trellix CNA under the mitre root
CNA scorecard – unranked: 3 records in the last 180 days, 10 needed details
References
Impacted products
Credits
Bahaa Naamneh of Crosspoint Labs
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T17:41:16.227Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kcm.trellix.com/corporate/index?page=content\u0026id=SB10415"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0206",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-10T18:33:10.958239Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-17T17:54:03.046Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Anti-Malware Engine",
          "vendor": "Trellix",
          "versions": [
            {
              "status": "affected",
              "version": "6600"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Bahaa Naamneh of Crosspoint Labs"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn\u0027t normally have permission to. After a scan, the Engine would follow the links and remove the files\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nA symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn\u0027t normally have permission to. After a scan, the Engine would follow the links and remove the files\n\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-09T12:56:46.957Z",
        "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
        "shortName": "trellix"
      },
      "references": [
        {
          "url": "https://kcm.trellix.com/corporate/index?page=content\u0026id=SB10415"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
    "assignerShortName": "trellix",
    "cveId": "CVE-2024-0206",
    "datePublished": "2024-01-09T12:56:46.957Z",
    "dateReserved": "2024-01-03T04:30:32.801Z",
    "dateUpdated": "2025-04-17T17:54:03.046Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0068 (GCVE-0-2024-0068)

Vulnerability from cvelistv5 – Published: 2024-02-29 19:51 – Updated: 2024-09-03 18:20
VLAI
Summary
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-22 18:01 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
HYPR CNA under the mitre root
CNA scorecard – unranked: 2 records in the last 180 days, 10 needed details
References
Impacted products
Vendor Product Version
HYPR Workforce Access Affected: 0 , < 8.7.1 (patch)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T17:41:16.014Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hypr.com/trust-center/security-advisories"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0068",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-22T18:01:09.727376Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T18:20:05.758Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Workforce Access",
          "vendor": "HYPR",
          "versions": [
            {
              "lessThan": "8.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Link Resolution Before File Access (\u0027Link Following\u0027) vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.\u003cp\u003eThis issue affects Workforce Access: before 8.7.1.\u003c/p\u003e"
            }
          ],
          "value": "Improper Link Resolution Before File Access (\u0027Link Following\u0027) vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.\n\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-165",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-165 File Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-29T19:51:38.562Z",
        "orgId": "0dc7baee-4a9f-419f-bd0a-e21ec5dac512",
        "shortName": "HYPR"
      },
      "references": [
        {
          "url": "https://www.hypr.com/trust-center/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0dc7baee-4a9f-419f-bd0a-e21ec5dac512",
    "assignerShortName": "HYPR",
    "cveId": "CVE-2024-0068",
    "datePublished": "2024-02-29T19:51:38.562Z",
    "dateReserved": "2023-11-27T18:04:01.975Z",
    "dateUpdated": "2024-09-03T18:20:05.758Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-53973 (GCVE-0-2023-53973)

Vulnerability from cvelistv5 – Published: 2025-12-22 21:35 – Updated: 2026-01-03 20:46
VLAI
Title
Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module
Summary
Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking.
Severity
8.5 (High)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: poc Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-12-22 21:58 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
VulnCheck CNA under the mitre root
CNA scorecard B 84/100 over 6750 records in the last 180 days details
References
Impacted products
Vendor Product Version
Zillya Zillya Total Security Affected: 3.0.2367.0
Create a notification for this product.
Date Public
2022-12-02 00:00
Credits
M. Akil Gündoğan
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-53973",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-22T21:58:35.405222Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-22T22:04:41.682Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://www.exploit-db.com/exploits/51151"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Zillya Total Security",
          "vendor": "Zillya",
          "versions": [
            {
              "status": "affected",
              "version": "3.0.2367.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "M. Akil G\u00fcndo\u011fan"
        }
      ],
      "datePublic": "2022-12-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eZillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking.\u003c/p\u003e"
            }
          ],
          "value": "Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-03T20:46:28.195Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "ExploitDB-51151",
          "tags": [
            "exploit"
          ],
          "url": "https://www.exploit-db.com/exploits/51151"
        },
        {
          "name": "Zillya Official Homepage",
          "tags": [
            "product"
          ],
          "url": "https://zillya.com/"
        },
        {
          "name": "VulnCheck Advisory: Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/zillya-total-security-local-privilege-escalation-via-quarantine-module"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2023-53973",
    "datePublished": "2025-12-22T21:35:33.394Z",
    "dateReserved": "2025-12-20T16:31:20.899Z",
    "dateUpdated": "2026-01-03T20:46:28.195Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-51636 (GCVE-0-2023-51636)

Vulnerability from cvelistv5 – Published: 2024-05-22 19:16 – Updated: 2024-08-02 22:40
VLAI
Title
Avira Prime Link Following Local Privilege Escalation Vulnerability
Summary
Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avira Spotlight Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21600.
Severity
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-23 17:10 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
zdi CNA under the mitre root
CNA scorecard C 73/100 over 121 records in the last 180 days details
References
Impacted products
Vendor Product Version
Avira Prime Affected: 1.1.94.4
Create a notification for this product.
avira prime Affected: 1.1.94.4
    cpe:2.3:a:avira:prime:*:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2024-05-17 23:23
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:avira:prime:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "prime",
            "vendor": "avira",
            "versions": [
              {
                "status": "affected",
                "version": "1.1.94.4"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51636",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-23T17:10:38.775370Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:19.959Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:34.068Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-469",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-469/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Prime",
          "vendor": "Avira",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.94.4"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.484Z",
      "datePublic": "2024-05-17T23:23:37.158Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Avira Spotlight Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21600."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-22T19:16:48.396Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-469",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-469/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Filip Dragovic (@filip_dragovic)"
      },
      "title": "Avira Prime Link Following Local Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51636",
    "datePublished": "2024-05-22T19:16:48.396Z",
    "dateReserved": "2023-12-20T21:52:34.963Z",
    "dateUpdated": "2024-08-02T22:40:34.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50226 (GCVE-0-2023-50226)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:14 – Updated: 2024-09-18 18:30
VLAI
Title
Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability
Summary
Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Updater service. By creating a symbolic link, an attacker can abuse the service to move arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. . Was ZDI-CAN-21227.
Severity
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-03 20:12 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
zdi CNA under the mitre root
CNA scorecard C 73/100 over 121 records in the last 180 days details
References
Impacted products
Vendor Product Version
Parallels Desktop Affected: 18.3.0 (53606)
Create a notification for this product.
parallels parallels_desktop Affected: 0 , < 18.3.2 (semver)
    cpe:2.3:a:parallels:parallels_desktop:*:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2023-12-19 08:54
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:parallels:parallels_desktop:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "parallels_desktop",
            "vendor": "parallels",
            "versions": [
              {
                "lessThan": "18.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50226",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-03T20:12:03.013364Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:17:41.724Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:09:49.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-23-1805",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1805/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://kb.parallels.com/en/125013"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Desktop",
          "vendor": "Parallels",
          "versions": [
            {
              "status": "affected",
              "version": "18.3.0 (53606)"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-05T19:37:59.707Z",
      "datePublic": "2023-12-19T08:54:36.622Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Updater service. By creating a symbolic link, an attacker can abuse the service to move arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.\n. Was ZDI-CAN-21227."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-18T18:30:36.184Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-23-1805",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1805/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.parallels.com/en/125013"
        }
      ],
      "source": {
        "lang": "en",
        "value": "kn32"
      },
      "title": "Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-50226",
    "datePublished": "2024-05-03T02:14:44.316Z",
    "dateReserved": "2023-12-05T16:15:17.544Z",
    "dateUpdated": "2024-09-18T18:30:36.184Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50197 (GCVE-0-2023-50197)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:14 – Updated: 2024-08-15 15:50
VLAI
Title
Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability
Summary
Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845.
Severity
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-19 14:38 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
zdi CNA under the mitre root
CNA scorecard C 73/100 over 121 records in the last 180 days details
References
Impacted products
Vendor Product Version
Intel Driver & Support Assistant Affected: 23.3.25.6
Create a notification for this product.
intel driver\&support_assistant Affected: 23.3.25.6
    cpe:2.3:a:intel:driver\&support_assistant:*:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2023-12-13 18:13
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:intel:driver\\\u0026support_assistant:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "driver\\\u0026support_assistant",
            "vendor": "intel",
            "versions": [
              {
                "status": "affected",
                "version": "23.3.25.6"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50197",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-19T14:38:03.377106Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-15T15:50:50.156Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:09:49.786Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-23-1773",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1773/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Driver \u0026 Support Assistant",
          "vendor": "Intel",
          "versions": [
            {
              "status": "affected",
              "version": "23.3.25.6"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-05T19:37:59.540Z",
      "datePublic": "2023-12-13T18:13:10.483Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Intel Driver \u0026 Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver \u0026 Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:14:22.353Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-23-1773",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1773/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "Intel Driver \u0026 Support Assistant Link Following Local Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-50197",
    "datePublished": "2024-05-03T02:14:22.353Z",
    "dateReserved": "2023-12-05T16:15:17.539Z",
    "dateUpdated": "2024-08-15T15:50:50.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-45159 (GCVE-0-2023-45159)

Vulnerability from cvelistv5 – Published: 2023-10-05 10:11 – Updated: 2025-06-18 18:40
VLAI
Title
1E Client installer can perform arbitrary file deletion on protected files
Summary
1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hotfix is available from the 1E support portal that forces the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID. for v8.1 use hotfix Q23097 for v8.4 use hotfix Q23105 for v9.0 use hotfix Q23115 for SaaS customers, use 1EClient v23.7 plus hotfix Q23121
Severity
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-19 17:33 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
1E CNA
CNA scorecard – unranked: 0 records in the last 180 days, 10 needed details
References
Impacted products
Vendor Product Version
1E 1E Client Affected: 0 , < 8.1.2.62 (Q23097)
Affected: 0 , < 8.4.1.159 (Q23105)
Affected: 0 , < 9.0.1.88 (Q23115)
Affected: 0 , < 23.7.1.151 (Q23121)
Create a notification for this product.
1e client Affected: 0 , < 8.1.2.62 (custom)
Affected: 0 , < 8.4.1.159 (custom)
Affected: 0 , < 9.0.1.88 (custom)
Affected: 0 , < 23.7.1.151 (custom)
    cpe:2.3:a:1e:client:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
Thanks to Lockheed Martin red team who reported this issue.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:14:19.830Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.1e.com/trust-security-compliance/cve-info/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:1e:client:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "client",
            "vendor": "1e",
            "versions": [
              {
                "lessThan": "8.1.2.62",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.4.1.159",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "9.0.1.88",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "23.7.1.151",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-45159",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-19T17:33:38.940543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-17T14:24:11.447Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "1E Client",
          "vendor": "1E",
          "versions": [
            {
              "changes": [
                {
                  "at": "Q23097",
                  "status": "unaffected"
                }
              ],
              "lessThan": "8.1.2.62",
              "status": "affected",
              "version": "0",
              "versionType": "Q23097"
            },
            {
              "changes": [
                {
                  "at": "Q23105",
                  "status": "unaffected"
                }
              ],
              "lessThan": "8.4.1.159",
              "status": "affected",
              "version": "0",
              "versionType": "Q23105"
            },
            {
              "changes": [
                {
                  "at": "Q23115",
                  "status": "unaffected"
                }
              ],
              "lessThan": "9.0.1.88",
              "status": "affected",
              "version": "0",
              "versionType": "Q23115"
            },
            {
              "changes": [
                {
                  "at": "Q23121",
                  "status": "unaffected"
                }
              ],
              "lessThan": "23.7.1.151",
              "status": "affected",
              "version": "0",
              "versionType": "Q23121"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Thanks to Lockheed Martin red team who reported this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "1E Client installer can perform arbitrary file deletion on protected files.\u0026nbsp;\u0026nbsp;\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. \u003cbr\u003e\u003cbr\u003eA hotfix is available from the 1E support portal that forces\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ethe 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID.\u003cbr\u003e\u003cbr\u003efor v8.1 use hotfix Q23097\u003cbr\u003efor v8.4 use hotfix Q23105\u003cbr\u003efor v9.0 use hotfix Q23115\u003cbr\u003e\u003cbr\u003efor SaaS customers, use 1EClient v23.7 plus hotfix Q23121\u003c/span\u003e\u003c/span\u003e"
            }
          ],
          "value": "1E Client installer can perform arbitrary file deletion on protected files.\u00a0\u00a0\n\nA non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. \n\nA hotfix is available from the 1E support portal that forces\u00a0the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID.\n\nfor v8.1 use hotfix Q23097\nfor v8.4 use hotfix Q23105\nfor v9.0 use hotfix Q23115\n\nfor SaaS customers, use 1EClient v23.7 plus hotfix Q23121"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-122",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-122 Privilege Abuse"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-18T18:40:58.223Z",
        "orgId": "4a68d2b9-b68a-4765-95bd-17f35092666b",
        "shortName": "1E"
      },
      "references": [
        {
          "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2001/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "1E Client installer can perform arbitrary file deletion on protected files",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4a68d2b9-b68a-4765-95bd-17f35092666b",
    "assignerShortName": "1E",
    "cveId": "CVE-2023-45159",
    "datePublished": "2023-10-05T10:11:20.065Z",
    "dateReserved": "2023-10-04T23:59:54.078Z",
    "dateUpdated": "2025-06-18T18:40:58.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-43590 (GCVE-0-2023-43590)

Vulnerability from cvelistv5 – Published: 2023-11-14 23:15 – Updated: 2024-08-29 17:23
VLAI
Summary
Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-29 17:23 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
Zoom CNA under the mitre root
CNA scorecard C 60/100 over 18 records in the last 180 days details
References
Impacted products
Date Public
2023-11-14 16:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:44:43.776Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://explore.zoom.us/en/trust/security/security-bulletin/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-43590",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-29T17:23:15.568469Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-29T17:23:41.033Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Zoom Rooms for macOS",
          "vendor": "Zoom Video Communications, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "before 5.16.0"
            }
          ]
        }
      ],
      "datePublic": "2023-11-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Link following  in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.\u003cbr\u003e"
            }
          ],
          "value": "Link following  in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-132",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-132 Symlink Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-14T23:15:12.437Z",
        "orgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351",
        "shortName": "Zoom"
      },
      "references": [
        {
          "url": "https://explore.zoom.us/en/trust/security/security-bulletin/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351",
    "assignerShortName": "Zoom",
    "cveId": "CVE-2023-43590",
    "datePublished": "2023-11-14T23:15:12.437Z",
    "dateReserved": "2023-09-19T22:05:40.666Z",
    "dateUpdated": "2024-08-29T17:23:41.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-43078 (GCVE-0-2023-43078)

Vulnerability from cvelistv5 – Published: 2024-08-28 05:33 – Updated: 2024-08-28 22:31
VLAI
Summary
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.
Severity
6.7 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-28 14:17 UTC
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
dell CNA under the mitre root
CNA scorecard C 70/100 over 442 records in the last 180 days details
References
Impacted products
Vendor Product Version
Dell Dell Client Platform, Dell Dock Firmware Affected: N/A , < 1.27.0 (semver)
Affected: N/A , < 1.22.0 (semver)
Affected: N/A , < 1.14.1 (semver)
Affected: N/A , < 1.11.0 (semver)
Affected: N/A , < 1.19.0 (semver)
Affected: N/A , < 1.20.0 (semver)
Affected: N/A , < 1.24.0 (semver)
Affected: N/A , < 1.26.0 (semver)
Affected: N/A , < 1.12.0 (semver)
Affected: N/A , < 1.28.0 (semver)
Affected: N/A , < 1.17.0 (semver)
Affected: N/A , < 1.23.0 (semver)
Affected: N/A , < 1.30.0 (semver)
Affected: N/A , < 2.25.0 (semver)
Affected: N/A , < 1.16.0 (semver)
Affected: N/A , < 1.12.1 (semver)
Affected: N/A , < 2.24.0 (semver)
Affected: N/A , < 1.8.0 (semver)
Affected: N/A , < 1.18.0 (semver)
Affected: N/A , < 1.29.0 (semver)
Affected: N/A , < 1.24.1 (semver)
Affected: N/A , < 1.22.1 (semver)
Affected: N/A , < 1.31.0 (semver)
Affected: N/A , < 1.25.0 (semver)
Affected: N/A , < 1.10.0 (semver)
Affected: N/A , < 1.34.0 (semver)
Affected: N/A , < 1.32.0 (semver)
Affected: N/A , < 1.36.0 (semver)
Affected: N/A , < 1.10.1 (semver)
Affected: N/A , < 1.36.2 (semver)
Affected: N/A , < 1.21.1 (semver)
Affected: N/A , < 1.33.0 (semver)
Affected: N/A , < 1.35.0 (semver)
Affected: N/A , < 1.34.2 (semver)
Affected: N/A , < 1.30.1 (semver)
Affected: N/A , < 1.15.0 (semver)
Affected: N/A , < 2.22.0 (semver)
Affected: N/A , < 2.16.0 (semver)
Affected: N/A , < 1.22.2 (semver)
Affected: N/A , < 1.1.37 (semver)
Affected: N/A , < 1.27.1 (semver)
Affected: N/A , < 3.3.2 (semver)
Affected: N/A , < 1.28.1 (semver)
Affected: N/A , < 2.11.1 (semver)
Affected: N/A , < 2.28.0 (semver)
Affected: N/A , < 1.28.8 (semver)
Affected: N/A , < 1.1.16 (semver)
Affected: N/A , < 1.20.1 (semver)
Affected: N/A , < 1.9.0 (semver)
Affected: N/A , < 1.6.1 (semver)
Affected: N/A , < 1.1.15 (semver)
Affected: N/A , < 2.23.0 (semver)
Affected: N/A , < 3.20.0 (semver)
Affected: N/A , < 1.19.1 (semver)
Affected: N/A , < 2.9.0 (semver)
Affected: N/A , < 1.13.0 (semver)
Affected: N/A , < 1.0.14.20 (semver)
Affected: N/A , < 01.00.15 (semver)
Affected: N/A , < 01.00.36 (semver)
Affected: N/A , < 4.62.156.006 (semver)
Affected: N/A , < 4.66.128.015 (semver)
Affected: N/A , < 4.65.111.022 (semver)
Affected: N/A , < 4.61.124.014 (semver)
Affected: N/A , < 4.46.147.004 (semver)
Affected: N/A , < 4.46.134.013 (semver)
Affected: N/A , < 4.66.131.016 (semver)
Affected: N/A , < 4.46.135.009 (semver)
Affected: N/A , < 4.65.162.003 (semver)
Affected: N/A , < 4.65.119.017 (semver)
Affected: N/A , < 4.62.140.014 (semver)
Affected: N/A , < 4.46.166.001 (semver)
Affected: N/A , < 4.65.163.002 (semver)
Affected: N/A , < 4.62.139.013 (semver)
Affected: N/A , < 4.46.112.015 (semver)
Affected: N/A , < 4.65.116.019 (semver)
Affected: N/A , < 4.46.143.009 (semver)
Affected: N/A , < 4.46.145.004 (semver)
Affected: N/A , < 4.65.117.031 (semver)
Affected: N/A , < 4.62.102.024 (semver)
Affected: N/A , < 4.65.108.018 (semver)
Affected: N/A , < 4.69.120.013 (semver)
Affected: N/A , < 4.46.106.031 (semver)
Affected: N/A , < 7.2.2.0 (semver)
Affected: N/A , < 74.64 (semver)
Create a notification for this product.
dell alienware_m15_r6_firmware Affected: 0 , < 1.27.0 (semver)
    cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_m15_r7_firmware Affected: 0 , < 1.22.0 (semver)
    cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_m16_r1_firmware Affected: 0 , < 1.14.1 (semver)
    cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_x14_r2_firmware Affected: 0 , < 1.11.0 (semver)
    cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell chengming_3900_firmware Affected: 0 , < 1.19.0 (semver)
    cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell chengming_3988_firmware Affected: 0 , < 1.20.0 (semver)
    cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*
Create a notification for this product.
dell chengming_3991_firmware Affected: 0 , < 1.24.0 (semver)
    cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g15_5511_firmware Affected: 0 , < 1.26.0 (semver)
    cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g15_5530_firmware Affected: 0 , < 1.12.0 (semver)
    cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g3_3500_firmware Affected: 0 , < 1.28.0 (semver)
    cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g5_5000_firmware Affected: 0 , < 1.17.0 (semver)
    cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g5_5090_firmware Affected: 0 , < 1.23.0 (semver)
    cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell dell_g7_7700_firmware Affected: 0 , < 1.30.0 (semver)
    cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3630_tower_firmware Affected: 0 , < 2.25.0 (semver)
    cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_13_5320_firmware Affected: 0 , < 1.16.0 (semver)
    cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_13_5330_firmware Affected: 0 , < 1.12.1 (semver)
    cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_14_5410_firmware Affected: 0 , < 2.24.0 (semver)
    cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_15_3530_firmware Affected: 0 , < 1.8.0 (semver)
    cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_24_5411_all-in-one_firmware Affected: 0 , < 1.18.0 (semver)
    cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_3593_firmware Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_3880_firmware Affected: 0 , < 1.24.1 (semver)
    cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_3891_firmware Affected: 0 , < 1.22.1 (semver)
    cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5301_firmware Affected: 0 , < 1.31.0 (semver)
    cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_3300_firmware Affected: 0 , < 1.25.0 (semver)
    cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_3340_firmware Affected: 0 , < 1.10.0 (semver)
    cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_3420_firmware Affected: 0 , < 1.34.0 (semver)
    cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5290_firmware Affected: 0 , < 1.32.0 (semver)
    cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5320_firmware Affected: 0 , < 1.36.0 (semver)
    cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5340_firmware Affected: 0 , < 1.10.1 (semver)
    cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5420_firmware Affected: 0 , < 1.36.2 (semver)
    cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5530_firmware Affected: 0 , < 1.21.1 (semver)
    cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7220_rugged_extreme_firmware Affected: 0 , < 1.33.0 (semver)
    cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7290_firmware Affected: 0 , < 1.35.0 (semver)
    cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7320_firmware Affected: 0 , < 1.34.2 (semver)
    cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_9520_firmware Affected: 0 , < 1.30.1 (semver)
    cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_3000_thin_client_firmware Affected: 0 , < 1.15.0 (semver)
    cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_3080_firmware Affected: 0 , < 2.22.0 (semver)
    cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_3090_firmware Affected: 0 , < 2.16.0 (semver)
    cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_5090_tower_firmware Affected: 0 , < 1.22.2 (semver)
    cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_5400_all-in-one_firmware Affected: 0 , < 1.1.37 (semver)
    cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_5490_all-in-one_firmware Affected: 0 , < 1.27.1 (semver)
    cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3260_xe_compact_firmware Affected: 0 , < 3.3.2 (semver)
    cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3650_tower_firmware Affected: 0 , < 1.28.1 (semver)
    cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3660_firmware Affected: 0 , < 2.11.1 (semver)
    cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2024-02-22 06:30
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "alienware_m15_r6_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.27.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "alienware_m15_r7_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "alienware_m16_r1_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.14.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "alienware_x14_r2_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.11.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "chengming_3900_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.19.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "chengming_3988_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.20.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "chengming_3991_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.24.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "g15_5511_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.26.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "g15_5530_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "g3_3500_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.28.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "g5_5000_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "g5_5090_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.23.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "dell_g7_7700_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.30.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "precision_3630_tower_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.25.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_13_5320_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_13_5330_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_14_5410_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.24.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_15_3530_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.8.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_24_5411_all-in-one_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.18.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_3593_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_3880_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.24.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_3891_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "inspiron_5301_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.31.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_3300_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.25.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_3340_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_3420_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.34.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_5290_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.32.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_5320_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.36.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_5340_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_5420_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.36.2",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_5530_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.21.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_7220_rugged_extreme_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.33.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_7290_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.35.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_7320_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.34.2",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "latitude_9520_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.30.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_3000_thin_client_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.15.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_3080_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.22.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_3090_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_5090_tower_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.2",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_5400_all-in-one_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.1.37",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "optiplex_5490_all-in-one_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.27.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "precision_3260_xe_compact_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "3.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "precision_3650_tower_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.28.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "precision_3660_firmware",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.11.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-43078",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-28T14:17:19.963412Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-28T22:31:00.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Dell Client Platform, Dell Dock Firmware",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "1.27.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.14.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.12.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.28.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.17.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.30.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.25.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.16.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.12.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.24.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.8.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.29.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.25.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.10.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.34.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.32.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.36.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.10.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.36.2",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.33.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.35.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.34.2",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.30.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.15.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.22.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.16.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.2",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.37",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "3.3.2",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.28.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.11.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.28.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.28.8",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.16",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.9.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.6.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.15",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.23.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "3.20.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.13.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.0.14.20",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "01.00.15",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "01.00.36",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.62.156.006",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.66.128.015",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.111.022",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.61.124.014",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.147.004",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.134.013",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.66.131.016",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.135.009",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.162.003",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.119.017",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.62.140.014",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.166.001",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.163.002",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.62.139.013",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.112.015",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.116.019",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.143.009",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.145.004",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.117.031",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.62.102.024",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.65.108.018",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.69.120.013",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "4.46.106.031",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "7.2.2.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "74.64",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2024-02-22T06:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
            }
          ],
          "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-28T05:33:16.899Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-for-an-improper-link-resolution-vulnerability"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2023-43078",
    "datePublished": "2024-08-28T05:33:16.899Z",
    "dateReserved": "2023-09-15T07:02:11.648Z",
    "dateUpdated": "2024-08-28T22:31:00.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}
Mitigation MIT-48.1
Architecture and Design

Strategy: Separation of Privilege

  • Follow the principle of least privilege when assigning access rights to entities in a software system.
  • Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.
CAPEC-132: Symlink Attack

An adversary positions a symbolic link in such a manner that the targeted user or application accesses the link's endpoint, assuming that it is accessing a file with the link's name.

CAPEC-17: Using Malicious Files

An attack of this type exploits a system's configuration that allows an adversary to either directly access an executable file, for example through shell access; or in a possible worst case allows an adversary to upload a file and then execute it. Web servers, ftp servers, and message oriented middleware systems which have many integration points are particularly vulnerable, because both the programmers and the administrators must be in synch regarding the interfaces and the correct privileges for each interface.

CAPEC-35: Leverage Executable Code in Non-Executable Files

An attack of this type exploits a system's trust in configuration and resource files. When the executable loads the resource (such as an image file or configuration file) the attacker has modified the file to either execute malicious code directly or manipulate the target process (e.g. application server) to execute based on the malicious configuration parameters. Since systems are increasingly interrelated mashing up resources from local and remote sources the possibility of this attack occurring is high.

CAPEC-76: Manipulating Web Input to File System Calls

An attacker manipulates inputs to the target software which the target software passes to file system calls in the OS. The goal is to gain access to, and perhaps modify, areas of the file system that the target software did not intend to be accessible.

← Back to the CWE list