DSA-2023-274: Security Update for an SD ROM Utility Vulnerability
Riepilogo: SD ROM Utility remediation is available for an improper access control vulnerability that could be exploited by malicious users to compromise the affected system.
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
High
Dettagli
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-3039 | SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-3039 | SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Prodotti interessati e correzione
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| SD ROM Utility | Software | Versions prior to 1.0.2.0 | 1.0.2.0 or later | https://www.dell.com/support/home/drivers/driversdetails?driverid=HC20P |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| SD ROM Utility | Software | Versions prior to 1.0.2.0 | 1.0.2.0 or later | https://www.dell.com/support/home/drivers/driversdetails?driverid=HC20P |
Soluzioni alternative e mitigazioni
None.
Cronologia delle revisioni
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-09-11 | Initial Release |
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
Update Packages, 5820 XL Tower, 7820 XL Tower, 7920 XL Tower, Precision 7520, Precision 7720, Precision 5820 Tower, Precision 7820 Tower, Precision 7920 TowerProprietà dell'articolo
Numero articolo: 000216282
Tipo di articolo: Dell Security Advisory
Ultima modifica: 12 set 2023
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.