DSA-2023-030: Dell Command | Intel vPro Out of Band Security Update for an Arbitrary Folder Deletion Vulnerability
摘要: Dell Command | Intel vPro Out of Band remediation is available for an arbitrary folder deletion security vulnerability that may be exploited by malicious users to compromise the affected system. ...
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
Medium
详情
| Proprietary Code CVEs | Description | More Information |
CVE-2023-23697 |
Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H  See NVD (http://nvd.nist.gov/) for additional details. |
| Proprietary Code CVEs | Description | More Information |
CVE-2023-23697 |
Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H See NVD (http://nvd.nist.gov/) for additional details. |
受影响的产品和补救措施
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23697 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2023-23697 | Dell Command | Intel vPro Out of Band | Versions before 4.4.0 | 4.4.0 | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=08WTH |
修订历史记录
| Revision | Date | Description |
| 1.0 | 2023-02-07 | Initial Release |
确认
CVE-2023-23697: Dell Technologies would like to thank ycdxsb for reporting this issue.
相关信息
法律免责声明
受影响的产品
Dell Command | Intel vPro Out of Band, Product Security Information文章属性
文章编号: 000207929
文章类型: Dell Security Advisory
上次修改时间: 08 2月 2023
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。