CVE-2023-23696CWE-285

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability

High · published February 7, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-02-07T09:49Z
EPSS history
Timeline
  • 07 FEB 09:49Z
    Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability
    cvelistv5