Improper Folder Permission Exploit in Dell Command Monitor from Dell

CVE-2023-28068

What is CVE-2023-28068?

Dell Command Monitor, particularly in versions 10.9 and earlier, is impacted by an improper folder permission vulnerability. Local authenticated users can exploit this flaw if the software is installed in a non-default directory. This creates an opportunity for these users to write to protected directories, potentially resulting in privilege escalation and unauthorized access to sensitive information.

References