Lucene search

DellCVELIST:CVE-2023-32450

HistoryJul 27, 2023 - 4:33 a.m.

CVE-2023-32450

2023-07-2704:33:21

CWE-379

dell

www.cve.org

dell power manager

versions 3.3 to 3.14

improper access control

arbitrary code execution

limited access

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Power Manager (DPM)",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 3.3 to 3.14"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000215215/dsa-2023-181-dell-power-manager-security-update-for-an-improper-access-control-vulnerability

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-32450