CVE-2023-39256CWE-284

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability

High · published December 2, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-12-02T04:18Z
EPSS history
Timeline
  • 02 DEC 04:18Z
    Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability
    cvelistv5