CVE-2023-39246
CVE-2023-39246
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.6EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
16 Nov 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
Affected products
Dell · Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server (Windows)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →