DSA-2023-115: Dell Command Security Update for an InstallShield Vulnerability
Summary: Dell Command | Integration Suite (DCIS), Dell Command | Configure (DCC), and Dell Command | Intel vPro Out of Band (DCIV) remediation is available for an InstallShield improper access control vulnerability that could be exploited by malicious users to compromise the affected system. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Third-Party Component | CVE | More Information |
| InstallShield | CVE-2023-29080 | See NVD (http://nvd.nist.gov/) Flexera KB Articlefor additional information |
Affected Products & Remediation
| CVE(s) Addressed | Product | Affected Version(s) | Updated Version(s) | Link to Update |
| CVE-2023-29080 | Dell Command | Intel vPro Out of Band | Versions prior to 4.4.1 |
4.4.1 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=8N9GH |
| CVE-2023-29080 | Dell Command | Integration Suite | Versions prior to 6.4.1 |
6.4.1 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=63F0W |
| CVE-2023-29080 | Dell Command | Configure | Versions prior to 4.10.1 |
4.10.1 | https://www.dell.com/support/home/drivers/driversdetails?driverid=42DF2 |
| CVE(s) Addressed | Product | Affected Version(s) | Updated Version(s) | Link to Update |
| CVE-2023-29080 | Dell Command | Intel vPro Out of Band | Versions prior to 4.4.1 |
4.4.1 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=8N9GH |
| CVE-2023-29080 | Dell Command | Integration Suite | Versions prior to 6.4.1 |
6.4.1 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=63F0W |
| CVE-2023-29080 | Dell Command | Configure | Versions prior to 4.10.1 |
4.10.1 | https://www.dell.com/support/home/drivers/driversdetails?driverid=42DF2 |
Workarounds & Mitigations
None
Revision History
|
Revision |
Date |
Description |
|
1.0 |
2023-04-11 |
Initial Release |
Acknowledgements
CVE-2023-29080: Dell would like to thank HackAndPwn for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Latitude 3120, Latitude 3180, Latitude 3189, Latitude 3190 2-in-1, Latitude 3300, Latitude 13 3379 2-in-1, Latitude 5414 Rugged, Dell Precision Tower 3420, Dell Precision Tower 3620, Dell Precision Tower 7810Products
Dell Command | Configure, Dell Command | Integration Suite for Microsoft System Center, Dell Command | Intel vPro Out of Band, Latitude 7200 2-in-1, Latitude 7210 2-in-1, Latitude 7212 Rugged Extreme Tablet, Latitude 7214 Rugged Extreme
, Latitude 7220EX Rugged Extreme Tablet, Latitude 7220 Rugged Extreme Tablet, Latitude 7280, Latitude 7285 2-in-1, Latitude 7290, Latitude 3301, Latitude 3310 2-in-1, Latitude 3310, Latitude 3320, Latitude 5320, Latitude 7300, Latitude 7310, Latitude 7320, Latitude 7320 Detachable, Latitude 5400, Latitude 5401, Latitude 5410, Latitude 5411, Latitude 5420 Rugged, Latitude 5421, Latitude 5424 Rugged, Latitude 5480/5488, Latitude 5490, Latitude 5491, Latitude 5495, Latitude 5420, Latitude 7202 Rugged Tablet, Latitude 7275, OptiPlex 3020, OptiPlex 3070 Tower, OptiPlex 3090 Tower, OptiPlex 3090 Ultra, OptiPlex 3240 All-in-One, OptiPlex 3280 All-In-One, OptiPlex 5040 Tower, OptiPlex 5055 Ryzen APU Tower, OptiPlex 5055 Ryzen CPU Tower, OptiPlex 5250 All-In-One, OptiPlex 5260 All-In-One, OptiPlex 5270 All-In-One, OptiPlex 5480 All-In-One, OptiPlex 5490 All-In-One, OptiPlex 7020 Tower (End of Life), OptiPlex 7040 Tower, OptiPlex 7050 Tower, OptiPlex 7060 Tower, OptiPlex 7071 Tower, OptiPlex 7080 Tower, OptiPlex 7090 Tower, OptiPlex 7400 All-In-One, OptiPlex 7440 All-In-One, OptiPlex 7450 All-In-One, OptiPlex 7460 All-In-One, OptiPlex 7470 All-In-One, OptiPlex 7480 All-In-One, OptiPlex 7490 All-In-One, OptiPlex 9020 All-In-One, Optiplex 9020, OptiPlex 9030 All-In-One, Precision 3440 XE Small Form Factor, Precision 3450 XE Small Form Factor, Precision 3640 XE Tower, Precision 3650 XE Tower, OptiPlex 7080 XE Micro Form Factor, Precision 3930 XL Rack, Precision 3630 XL Tower, Precision 3540, Precision 3541, Precision 3550, Precision 3551, Precision 3560, Precision 3561, Precision 5520, Precision 5530 2 in 1, Precision 5530, Precision 5540, Precision 5550, Precision 5560, Precision 7520, Precision 7530, Precision 7550, Precision 7560, Precision 7730, Precision 7740, Precision 7750, Precision 7760, Precision 3240 Compact, Precision 3431, Precision 3440 Small Form Factor, Precision 3450 Small Form Factor, Precision 3630 Tower, Precision 3640 Tower, Precision 3650 Tower, Precision 3930 Rack, Precision 5720 AIO, Precision 5820 Tower, Precision 7820 Tower, Precision 7920 Tower, Precision 5510, Precision 7510, Precision 7710, Precision Rack 7910, Precision T1650, Precision T1700, Precision T5610, Precision Tower 5810, Precision T7600, Precision T7610, Precision Tower 7910, Product Security Information, XPS 13 7390 2-in-1, XPS 13 7390, XPS 13 9300, XPS 13 9305, XPS 13 9310 2-in-1, XPS 13 9310, XPS 13 9360, XPS 13 9365 2-in-1, XPS 13 9370, XPS 15 7590, XPS 15 9500, XPS 15 9560, XPS 15 9570, XPS 15 9575 2-in-1, XPS 17 9700, XPS 17 9710
...
Article Properties
Article Number: 000211942
Article Type: Dell Security Advisory
Last Modified: 11 Apr 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.