DSA-2023-387: Security Update for a Dell Command | Configure Vulnerability
Resumen: Dell Command | Configure remediation is available for an improper access control vulnerability that could be exploited by malicious users to compromise the affected system.
Este artículo se aplica a
Este artículo no se aplica a
Este artículo no está vinculado a ningún producto específico.
No se identifican todas las versiones del producto en este artículo.
Impacto
High
Detalles
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-43086 | Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-43086 | Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Corrección y productos afectados
| Product | Affected Version(s) | Remediated Version(s) | Link |
|---|---|---|---|
| Dell Command | Configure | Versions prior to 4.11.0 | 4.11.0.70, A00 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=5WCHH |
| Product | Affected Version(s) | Remediated Version(s) | Link |
|---|---|---|---|
| Dell Command | Configure | Versions prior to 4.11.0 | 4.11.0.70, A00 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=5WCHH |
Historial de revisiones
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-11-21 | Initial Release |
| 1.1 | 2023-11-22 | Updated Proprietary Code section: Revised CVE Vulnerability Description |
Información relacionada
Descargo de responsabilidad
Productos afectados
Dell Command | ConfigurePropiedades del artículo
Número del artículo: 000218424
Tipo de artículo: Dell Security Advisory
Última modificación: 22 nov 2023
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.