Improper Folder Permission Exploit in Dell Command Monitor from Dell

CVE-2023-28068

Summary

Dell Command Monitor, particularly in versions 10.9 and earlier, is impacted by an improper folder permission vulnerability. Local authenticated users can exploit this flaw if the software is installed in a non-default directory. This creates an opportunity for these users to write to protected directories, potentially resulting in privilege escalation and unauthorized access to sensitive information.

References