CVE-2023-28068CWE-732

Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability

High · published May 5, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2023-05-05T06:41Z
EPSS history
Timeline
  • 05 MAY 06:41Z
    Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability
    cvelistv5