CVE-2023-32479

CVSS 6.7 MEDIUMEPSS 0.1%CWE-284

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.7EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

06 feb 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Dell · Dell Encryption Dell · Dell Endpoint Security Suite Enterprise Dell · Dell Security Management Server (Windows)

Referencias

https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260