DSA-2023-032: Dell Command | Integration Suite for System Center Security Update for an Arbitrary Folder Deletion Vulnerability
Summary: Dell Command | Integration Suite for System Center remediation is available for an arbitrary folder deletion security vulnerability that may be exploited by malicious users to compromise the affected system. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-24572 | Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H  See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-24572 | Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H See NVD (http://nvd.nist.gov/) for additional details. |
Affected Products & Remediation
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-24572 | Dell Command | Integration Suite for System Center | Versions prior to 6.4.0 |
6.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=T9HK2 |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-24572 | Dell Command | Integration Suite for System Center | Versions prior to 6.4.0 |
6.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=T9HK2 |
Revision History
| Revision | Date | Description |
| 1.0 | 2023-02-07 | Initial Release |
Acknowledgements
CVE-2023-24573: Dell Technologies would like to thank ycdxsb for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Dell Command | Integration Suite for Microsoft System Center, Product Security InformationArticle Properties
Article Number: 000207931
Article Type: Dell Security Advisory
Last Modified: 08 Feb 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.