Improper Access Control in Dell Command | Configure Affects User Privileges
CVE-2023-44289

7.8HIGH

Key Information:

Vendor
Dell
Status
Dell Command Configure (DCC)
Vendor
CVE Published:
23 November 2023

Summary

The Dell Command | Configure software is susceptible to an improper access control vulnerability. This flaw allows a local, malicious standard user to exploit the system during installation or repair processes. By leveraging this vulnerability, attackers could escalate their privileges, potentially compromising system integrity and security. Users of affected versions prior to 4.11.0 are advised to update their software to mitigate risks associated with this vulnerability.

Affected Version(s)

Dell Command Configure (DCC) Dell Command | Configure Versions prior to 4.11.0

References

https://www.dell.com/support/kbdoc/en-us/000218628/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.