Local Code Execution Risk in Dell Encryption and Endpoint Security Installers

CVE-2019-3745

What is CVE-2019-3745?

A vulnerability exists in the installers of Dell Encryption Enterprise and Dell Endpoint Security Suite Enterprise prior to specific versions, where a low privileged authenticated user can exploit the system by placing a malicious DLL in the installer’s search path before an administrator runs the installation. This allows the execution of arbitrary code with elevated privileges, potentially compromising system security during the setup process.

References