Dell OS Recovery Tool untrusted search path allows command execution
Dell PC recovery program: someone with direct access to the PC can hack it.
Summary
An untrusted search path flaw in Dell OS Recovery Tool lets an attacker with local access to the PC run commands. Versions before 2.4.4 are affected.
Affected when
- attacker has local access to the PC
What to do
Update Dell OS Recovery Tool to 2.4.4 or later.
Products and platforms
CVE IDs
Sources
- Advisory: dell.com (opens in a new tab)
Times
First published
First seen