Lucene search

[email protected]CVE-2023-44281

HistoryJan 24, 2024 - 4:15 p.m.

CVE-2023-44281

2024-01-2416:15:08

CWE-264

[email protected]

web.nvd.nist.gov

cve-2023-44281

dell

pair installer

eop

vulnerability

privilege

local access

dos

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potentially exploit this vulnerability to delete arbitrary files and result in Denial of Service.

Affected configurations

NVD

Node

dellpairRange<1.2.1

CPENameOperatorVersion
dell:pairdell pairlt1.2.1

CPE	Name	Operator	Version
dell:pair	dell pair	lt	1.2.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Pair",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000219185/dsa-2023-141

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-44281

prion1 nvd1 cvelist1