Lucene search

DellCVE-2023-25543

HistoryFeb 06, 2024 - 7:15 a.m.

CVE-2023-25543

2024-02-0607:15:08

CWE-755

CWE-280

dell

web.nvd.nist.gov

cve-2023-25543

dell

power manager

improper authorization

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system.

Affected configurations

Nvd

Vulners

Node

dellpower_managerRange<3.14

VendorProductVersionCPE
dellpower_manager*cpe:2.3:a:dell:power_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	power_manager	*	cpe:2.3:a:dell:power_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Power Manager (DPM)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "3.14",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000209464/dsa-2023-075

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-25543