Improper Folder Permission Exploit in Dell Command Monitor from Dell
CVE-2023-28068

7.3HIGH

Key Information:

Vendor

Dell
Status
Dell Command Monitor (dcm)
Vendor
CVE Published:
5 May 2023

What is CVE-2023-28068?

Dell Command Monitor, particularly in versions 10.9 and earlier, is impacted by an improper folder permission vulnerability. Local authenticated users can exploit this flaw if the software is installed in a non-default directory. This creates an opportunity for these users to write to protected directories, potentially resulting in privilege escalation and unauthorized access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Dell Command Monitor (DCM) Versions 10.9 and prior

References

https://www.dell.com/support/kbdoc/en-us/000212226/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.