DLL Hijacking Vulnerabilities in PowerPath for Windows by Dell
CVE-2023-28080

7.3HIGH

Key Information:

Vendor

Dell
Status
PowerPath Windows
Vendor
CVE Published:
30 May 2023

What is CVE-2023-28080?

PowerPath for Windows, versions 7.0, 7.1, and 7.2, are affected by DLL Hijacking vulnerabilities. These flaws allow a non-administrative user to exploit the system, leading to potential privilege escalation and execution of arbitrary code within the NT AUTHORITY\SYSTEM context. Organizations using these versions should apply the latest security updates to mitigate the risk of abuse.

Affected Version(s)

PowerPath Windows 7.0, 7.1 & 7.2

References

https://www.dell.com/support/kbdoc/en-us/000214248/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.