CVE-2025-46367CWE-390

CVE-2025-46367

High · published November 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

⚡ A low-privileged local attacker can unleash chaos! With the Dell Alienware Command Center (AWCC) prior to version 6.10.15.0, just a tiny oversight could lead to Arbitrary Code Execution. 🔥 Think of it like a restaurant where the staff ignores the 'out of order' signs on the kitchen equipment. A savvy (and ill-intentioned) cook could use that to whip up whatever dish they want, bypassing all the safety checks. That's what this vulnerability enables! If exploited, this flaw could allow attackers to run any code they choose on the system—potentially hijacking it to manipulate settings, access sensitive data, or install malicious software. It's an alarming situation where your trusted setup could be turned against you!

Put simply

Think of it like a restaurant where the staff ignores the 'out of order' signs on the kitchen equipment. A savvy (and ill-intentioned) cook could use that to whip up whatever dish they want, bypassing all the safety checks. That's what this vulnerability enables! The vulnerability arises from the failure to handle certain error conditions properly, allowing local attackers to execute arbitrary code without sufficient privileges, which should normally prevent such actions.

What to do

If exploited, this flaw could allow attackers to run any code they choose on the system—potentially hijacking it to manipulate settings, access sensitive data, or install malicious software. It's an alarming situation where your trusted setup could be turned against you! To mitigate this risk, users should update their Dell Alienware Command Center to version 6.10.15.0 or later immediately. Additionally, consider reviewing local access controls to limit exposure to potential attackers. Don’t wait—act now! This is fixable! Follow these steps and you'll have your system secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Weakness
CWE-390 · Detection of Error Condition Without Action
Published
2025-11-14T01:15Z
Affected products (1)
ProductVersionsFixed in
dell/alienware_command_center≥ 6.0, < 6.10.15.06.10.15.0
References (1)
EPSS history
Timeline
  • 13 NOV 19:23Z
    Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability
    cvelistv5