Dell Alienware Command Center up to 6.7.37.0 process control
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 4.3 | $0-$5k | 0.00 |
Summary
A vulnerability marked as problematic has been reported in Dell Alienware Command Center. Affected is an unknown function. The manipulation leads to process control. This vulnerability is documented as CVE-2025-46370. The attack needs to be performed locally. There is not any exploit available. It is suggested to upgrade the affected component.
Details
A vulnerability was found in Dell Alienware Command Center. It has been rated as problematic. This issue affects an unknown code. The manipulation with an unknown input leads to a process control vulnerability. Using CWE to declare the problem leads to CWE-114. Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker. Impacted is confidentiality, integrity, and availability. The summary by CVE is:
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
The advisory is shared at dell.com. The identification of this vulnerability is CVE-2025-46370 since 04/23/2025. The exploitation is known to be difficult. An attack has to be approached locally. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.
Upgrading to version 6.10.15.0 eliminates this vulnerability.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Product
Vendor
Name
Version
License
Website
- Vendor: https://www.dell.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔒VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 4.3VulDB Meta Temp Score: 4.3
VulDB Base Score: 4.2
VulDB Temp Score: 4.0
VulDB Vector: 🔒
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔒
CNA Base Score: 3.3
CNA Vector (dell): 🔒
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploiting
Class: Process controlCWE: CWE-114
CAPEC: 🔒
ATT&CK: 🔒
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔒
Status: Not defined
EPSS Score: 🔒
EPSS Percentile: 🔒
Price Prediction: 🔍
Current Price Estimation: 🔒
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔒
Upgrade: Alienware Command Center 6.10.15.0
Timeline
04/23/2025 CVE reserved11/14/2025 Advisory disclosed
11/14/2025 VulDB entry created
11/17/2025 VulDB entry last update
Sources
Vendor: dell.comAdvisory: dsa-2025-392
Status: Confirmed
CVE: CVE-2025-46370 (🔒)
GCVE (CVE): GCVE-0-2025-46370
GCVE (VulDB): GCVE-100-332441
Entry
Created: 11/14/2025 07:47Updated: 11/17/2025 13:41
Changes: 11/14/2025 07:47 (63), 11/17/2025 13:41 (11)
Complete: 🔍
Cache ID: 216::103
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
No comments yet. Languages: en.
Please log in to comment.