Lucene search

DellCVE-2023-22576

HistoryAug 21, 2024 - 10:15 a.m.

CVE-2023-22576

2024-08-2110:15:04

CWE-269

dell

web.nvd.nist.gov

dell repository manager

local privilege escalation

arbitrary executable

operating system

vulnerability

exploitation

unavailability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

Percentile

9.5%

JSON

Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. Exploitation may lead to unavailability of the service.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

dellrepository_managerRange<3.4.3

VendorProductVersionCPE
dellrepository_manager*cpe:2.3:a:dell:repository_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	repository_manager	*	cpe:2.3:a:dell:repository_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Repository Manager (DRM)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "3.4.2",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000207513/dsa-2023-017-dell-emc-repository-manager-drm-security-update-for-an-improper-privilege-management-vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

Percentile

9.5%

JSON

Related for CVE-2023-22576