CVE-2025-46367

Description

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-390 CWE-390

Affected Products

Vendor	Product	Versions
dell	alienware_command_center	6.0 — 6.10.15.0

References

Advisories & Patches

https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392

Frequently Asked Questions

What is CVE-2025-46367? +

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-46367? +

CVE-2025-46367 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-46367? +

CVE-2025-46367 affects products from dell, specifically: alienware_command_center. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-46367? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-49841 7.8

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

CVE-2024-27919 7.5

Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable …

CVE-2025-26465 6.8

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a …

CVE-2025-27039 6.6

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2025-25204 6.3

`gh` is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a …

CVE-2024-12086 6.1

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from …