CVE-2023-28046

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000211727/dsa-2023	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:display_manager:*:*:*:*:*:*:*:*

History

07 Nov 2023, 04:10

Type	Values Removed	Values Added
Summary	Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges.	Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges.

Information

Published : 2023-04-06 07:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-28046

Mitre link : CVE-2023-28046

CVE.ORG link : CVE-2023-28046

JSON object : View

Products Affected

dell

display_manager

CWE

CWE-272

Least Privilege Violation

7.1 /10