Improper Authorization Vulnerability in Dell Command Intel vPro Out of Band
CVE-2023-23696

7HIGH

Key Information:

Vendor

Dell
Status
Dell Command Intel Vpro Out Of Band (dciv)
Vendor
CVE Published:
7 February 2023

What is CVE-2023-23696?

Dell Command Intel vPro Out of Band, specifically versions prior to 4.3.1, is susceptible to an Improper Authorization vulnerability. This flaw could allow a locally authenticated malicious user to exploit the system, potentially enabling them to write arbitrary files, thus compromising the system's integrity. Users are urged to upgrade to version 4.3.1 or higher to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Dell Command Intel vPro Out of Band (DCIV) 0

References

https://www.dell.com/support/kbdoc/en-us/000208331/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.