Description
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Dell Command Update (DCU) | < 5.7.1 | 5.7.1 |