CVE-2025-46369CWE-377

CVE-2025-46369

High · published November 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

⚡ A local attacker with basic access can turn this vulnerability into a privilege escalation opportunity — sneakier than a cat burglar slipping through a window! 🔥 Think of it like a construction site where a worker finds a set of blueprints lying around. If they can get their hands on those plans, they could rewrite the rules and access restricted areas without anyone noticing! This vulnerability could allow an attacker to escalate their privileges on the system, potentially gaining full control over sensitive data or system functions. This could lead to unauthorized access to personal information, unauthorized changes to settings, and even the ability to install malicious software. Yikes!

Put simply

Think of it like a construction site where a worker finds a set of blueprints lying around. If they can get their hands on those plans, they could rewrite the rules and access restricted areas without anyone noticing! The vulnerability in Alienware Command Center 6.x allows low-privileged users to exploit insecure temporary files, giving them the ability to gain elevated privileges on the system.

What to do

This vulnerability could allow an attacker to escalate their privileges on the system, potentially gaining full control over sensitive data or system functions. This could lead to unauthorized access to personal information, unauthorized changes to settings, and even the ability to install malicious software. Yikes! To protect yourself, update to version 6.10.15.0 or later immediately. Review user permissions and ensure that temporary files are handled securely to minimize risks. Regularly audit your environment for any signs of privilege escalation attempts. You've got this! Patch up, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.5th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2025-11-14T01:15Z
Affected products (1)
ProductVersionsFixed in
dell/alienware_command_center≥ 6.0, < 6.10.15.06.10.15.0
References (1)
EPSS history
Timeline
  • 13 NOV 19:41Z
    Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability
    cvelistv5