Skip to content
OpenAdvisories
Medium · 5.6 CVE-2019-3749 EUVD-2019-13384GHSA-f6pq-354j-4f2p

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low p…

Published Dec 3, 2019 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\ICProgress\Dell_InventoryCollector_Progress.xml" to any targeted file. This issue occurs because permissions on the Temp directory were set incorrectly.

Affected products

VendorProductAffectedFixed
Dell Dell Command Update (DCU) unspecified – < 3.1 3.1

References