CVE-2023-39257CWE-284

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability

High · published December 2, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege escalation on the system.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-12-02T04:22Z
EPSS history
Timeline
  • 02 DEC 04:22Z
    Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability
    cvelistv5