CVE-2023-28072 HIGH

CVE-2023-28072

Vendor Dell
Product Alienware Command Center (AWCC)
Weakness CWE-502 · Unsafe deserialization
Published September 4, 2023
Last update September 30, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting server to run arbitrary code on the system.

Key dates

02Disclosure timeline

September 4, 2023 CVE published
September 30, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2017-3199 GraniteDS, version 3.1.1.GA, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization CVE-2025-47568 WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability CVE-2025-2332 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses CVE-2023-20853 aEnrich a+HRD - Deserialization of Untrusted Data