Description
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.
CVSS 6.5EPSS 0.10300000000000001%Risque 0.66
Voir la source- Publication
- 2026-08-19 15:17:51
- Versions concernées
- <5.7.1
- Type
- Autre
- Dernière modification
- 2026-08-21 13:40:30
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N