Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alienware_update | Dell | 4.6.0 (including) | 4.6.0 (including) |
| Alienware_update | Dell | 4.7.1 (including) | 4.7.1 (including) |
| Command_update | Dell | 4.6.0 (including) | 4.6.0 (including) |
| Command_update | Dell | 4.7.1 (including) | 4.7.1 (including) |