CVE-2023-25542CWE-276

Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability

High · published April 6, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2023-04-06T06:17Z
EPSS history
Timeline
  • 06 APR 06:17Z
    Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability
    cvelistv5