CVE-2023-23696

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-23696
Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:command_\|_intel_vpro_out_of_band:*:*:*:*:*:*:*:*
History

07 Nov 2023, 04:07

Type Values Removed Values Added
Summary Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system. Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.
Information

Published : 2023-02-07 10:15

Updated : 2024-02-28 19:51

NVD link : CVE-2023-23696

Mitre link : CVE-2023-23696

CVE.ORG link : CVE-2023-23696

JSON object : View

Products Affected

dell

  • command_\|_intel_vpro_out_of_band
CWE
CWE-863

Incorrect Authorization

CWE-285

Improper Authorization