DLL Injection Vulnerability in Dell Digital Delivery Software
CVE-2018-11072

7.8HIGH

Key Information:

Vendor
Dell
Status
Dell Digital Delivery
Vendor
CVE Published:
2 October 2018

Summary

Dell Digital Delivery software prior to version 3.5.1 is exposed to a vulnerability that allows a local authenticated attacker to exploit the application’s workflow. This exploit enables the attacker to load and execute a malicious Dynamic Link Library (DLL) with elevated privileges, potentially compromising sensitive data or system functionality. Users of affected versions should update to the latest version to mitigate the risk associated with this vulnerability.

Affected Version(s)

Dell Digital Delivery Versions prior to 3.5.1

References

https://www.dell.com/support/article/us/en/04/sln313559/d...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.