Description
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.
Published: 2026-11-02
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary Code Execution
Action: Patch Immediately
AI Analysis

Impact

The vulnerability is an Improper Verification of Cryptographic Signature (CWE‑347) affecting Dell Alienware Command Center before version 6.14.54.0. An unauthenticated attacker with adjacent network access can trigger the failure to validate digital signatures and thereby execute arbitrary code with elevated privileges on the affected machine.

Affected Systems

Dell Alienware Command Center (AWCC) versions earlier than 6.14.54.0 on Alienware systems.

Risk and Exploitability

With a CVSS score of 8.1 the vulnerability is considered high impact. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no known public exploitation yet. The attack vector is inferred to be network‑based due to the requirement of adjacent network access; therefore, machines exposed to internal or external networks should be urgently patched. If immediate patching is not feasible, limiting network exposure provides a temporary mitigation.

Generated by OpenCVE AI on November 2, 2026 at 22:38 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Dell Alienware Command Center to release 6.14.54.0 or later from Dell’s support portal.
  • Reboot the system after the update to ensure changes take effect.
  • Restrict network access to the appliance until the update is applied, such as placing it on a separate VLAN or disabling inbound connections.

Generated by OpenCVE AI on November 2, 2026 at 22:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 03 Nov 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 02 Nov 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell alienware Command Center
Vendors & Products Dell
Dell alienware Command Center

Mon, 02 Nov 2026 23:00:00 +0000

Type Values Removed Values Added
Title Improper Verification of Cryptographic Signature in Dell Alienware Command Center Allowing Arbitrary Code Execution

Mon, 02 Nov 2026 20:15:00 +0000

Type Values Removed Values Added
Description Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.
Weaknesses CWE-347
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Dell Alienware Command Center
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-11-03T15:39:31.747Z

Reserved: 2026-09-15T10:04:43.435Z

Link: CVE-2026-91898

cve-icon Vulnrichment

Updated: 2026-11-03T15:29:35.150Z

cve-icon NVD

Status : Deferred

Published: 2026-11-02T20:18:04.390

Modified: 2026-11-03T16:17:37.273

Link: CVE-2026-91898

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-02T23:00:09Z

Weaknesses
  • CWE-347

    Improper Verification of Cryptographic Signature