Improper Access Control in Dell OS Recovery Tool
CVE-2023-39253

7.8HIGH

Key Information:

Vendor

Dell
Status
Dell OS Recovery Tool
Vendor
CVE Published:
23 November 2023

What is CVE-2023-39253?

The Dell OS Recovery Tool has a vulnerability related to improper access controls, allowing local authenticated users to manipulate user privileges. This issue could enable these users to gain elevated access, potentially compromising the integrity and security of the system. It's crucial for those using affected versions to apply the available security update to mitigate this risk.

Affected Version(s)

Dell OS Recovery Tool Versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0.

References

https://www.dell.com/support/kbdoc/en-us/000217699/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.