DSA-2023-274: Security Update for an SD ROM Utility Vulnerability
摘要: SD ROM Utility remediation is available for an improper access control vulnerability that could be exploited by malicious users to compromise the affected system.
本文章適用於
本文章不適用於
本文無關於任何特定產品。
本文未識別所有產品版本。
影響
High
詳細資料
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-3039 | SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-3039 | SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
受影響的產品與補救措施
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| SD ROM Utility | Software | Versions prior to 1.0.2.0 | 1.0.2.0 or later | https://www.dell.com/support/home/drivers/driversdetails?driverid=HC20P |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| SD ROM Utility | Software | Versions prior to 1.0.2.0 | 1.0.2.0 or later | https://www.dell.com/support/home/drivers/driversdetails?driverid=HC20P |
因應措施與緩解措施
None.
修訂歷史記錄
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-09-11 | Initial Release |
相關資訊
法律免責聲明
受影響的產品
Update Packages, 5820 XL Tower, 7820 XL Tower, 7920 XL Tower, Precision 7520, Precision 7720, Precision 5820 Tower, Precision 7820 Tower, Precision 7920 Tower文章屬性
文章編號: 000216282
文章類型: Dell Security Advisory
上次修改時間: 12 9月 2023
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。