Bienvenue
Bienvenue dans l’univers Dell
Mon compte
- Passer des commandes rapidement et facilement
- Afficher les commandes et suivre l’état de votre expédition
- Profitez de récompenses et de remises réservées aux membres
- Créez et accédez à une liste de vos produits
- Gérer vos sites, vos produits et vos contacts au niveau des produits Dell EMC à l’aide de la rubrique Gestion des informations de l’entreprise.
Numéro d’article: 000208331
DSA-2023-029: Dell Command | Intel vPro Out of Band Security Update for an Improper Authorization Vulnerability
Résumé: Dell Command | Intel vPro Out of Band remediation is available for an improper authorization security vulnerability that may be exploited by malicious users to compromise the affected system. ...
Contenu de l’article
Impact
High
Détails
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band versions before 4.4.0, contain an Improper Authorization vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability in order to write arbitrary files to the system. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H  See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVEs | Description | More Information |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band versions before 4.4.0, contain an Improper Authorization vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability in order to write arbitrary files to the system. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H See NVD (http://nvd.nist.gov/) for additional details. |
Produits concernés et mesure corrective
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23696 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
Remerciements
CVE-2023-23696: Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
Historique des révisions
| Revision | Date | Description |
| 1.0 | 2023-02-06 | Initial Release |
Informations connexes
Informations légales
Propriétés de l’article
Produit concerné
Dell Command | Intel vPro Out of Band, Product Security Information
Dernière date de publication
06 févr. 2023
Version
1
Type d’article
Dell Security Advisory