Privilege Escalation Vulnerability in Dell Encryption

CVE-2023-32479

Summary

A privilege escalation vulnerability exists in specific versions of Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server. This issue arises from improper access control list (ACL) configurations within the non-default installation directory of these products. A local attacker with malicious intent could exploit this vulnerability by replacing binaries in the affected directory. Such an exploit could lead to a reverse shell on the system, allowing the attacker to gain elevated privileges and perform unauthorized actions.

References