CVE-2023-32479

2024-02-0608:15:51

CWE-284

dell

web.nvd.nist.gov

cve-2023-32479

dell

encryption

endpoint security

security management server

privilege escalation

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

dellencryptionRange<11.9.0

dellendpoint_security_suite_enterpriseRange<11.9.0

Node

dellsecurity_management_serverRange<11.9.0

AND

microsoftwindowsMatch-

VendorProductVersionCPE
dellencryption*cpe:2.3:a:dell:encryption:*:*:*:*:*:*:*:*
dellendpoint_security_suite_enterprise*cpe:2.3:a:dell:endpoint_security_suite_enterprise:*:*:*:*:*:*:*:*
dellsecurity_management_server*cpe:2.3:a:dell:security_management_server:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	encryption	*	cpe:2.3:a:dell:encryption::::::::
dell	endpoint_security_suite_enterprise	*	cpe:2.3:a:dell:endpoint_security_suite_enterprise::::::::
dell	security_management_server	*	cpe:2.3:a:dell:security_management_server::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Encryption",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "11.9.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Dell Endpoint Security Suite Enterprise",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "11.9.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Dell Security Management Server (Windows)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "11.9.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]