DSA-2023-029: Dell Command | Intel vPro Out of Band Security Update for an Improper Authorization Vulnerability
Summary: Dell Command | Intel vPro Out of Band remediation is available for an improper authorization security vulnerability that may be exploited by malicious users to compromise the affected system. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band versions before 4.4.0, contain an Improper Authorization vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability in order to write arbitrary files to the system. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H  See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band versions before 4.4.0, contain an Improper Authorization vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability in order to write arbitrary files to the system. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H See NVD (http://nvd.nist.gov/) for additional details. |
Affected Products & Remediation
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
Revision History
| Revision | Date | Description |
| 1.0 | 2023-02-06 | Initial Release |
Acknowledgements
CVE-2023-23696: Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Dell Command | Intel vPro Out of Band, Product Security InformationArticle Properties
Article Number: 000208331
Article Type: Dell Security Advisory
Last Modified: 06 Feb 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.