CVE-2023-32479CWE-284

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation…

Medium · published February 6, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 · 0.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-02-06T08:09Z
EPSS history
Timeline
  • 06 FEB 08:09Z
    Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation…
    cvelistv5