Improper Authorization Vulnerability in Dell Command Intel vPro Out of Band
CVE-2023-23696

7HIGH

Key Information:

Vendor

Dell
Status
Dell Command Intel Vpro Out Of Band (dciv)
Vendor
CVE Published:
7 February 2023

What is CVE-2023-23696?

Dell Command Intel vPro Out of Band, specifically versions prior to 4.3.1, is susceptible to an Improper Authorization vulnerability. This flaw could allow a locally authenticated malicious user to exploit the system, potentially enabling them to write arbitrary files, thus compromising the system's integrity. Users are urged to upgrade to version 4.3.1 or higher to mitigate this risk.

Affected Version(s)

Dell Command Intel vPro Out of Band (DCIV) 0

References

https://www.dell.com/support/kbdoc/en-us/000208331/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.