CVE-2023-39256CWE-284
Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability
High · published December 2, 2023
What it is
Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system.
The record
Technical detail
- CVSS v3.1
- 7.3 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00201 · 9.5th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2023-12-02T04:18Z
EPSS history
Timeline