Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260 | Vendor Advisory |
Configurations
History
13 Feb 2024, 22:54
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:dell:security_management_server:*:*:*:*:*:*:*:* cpe:2.3:a:dell:endpoint_security_suite_enterprise:*:*:*:*:*:*:*:* cpe:2.3:a:dell:encryption:*:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-Other | |
| References | () https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Dell security Management Server
Microsoft Dell endpoint Security Suite Enterprise Dell encryption Dell Microsoft windows |
06 Feb 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-06 08:15
Updated : 2024-02-13 22:54
NVD link : CVE-2023-32479
Mitre link : CVE-2023-32479
JSON object : View
Products Affected
dell
- endpoint_security_suite_enterprise
- encryption
- security_management_server
microsoft
- windows
CWE