high7.3
CVE-2023-44289
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability.
Impact
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Command\|Configure | before 4.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-dell-command-monitor-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-dell-command-monitor-vulnerabilities