Lucene search

[email protected]NVD:CVE-2023-22576

HistoryAug 21, 2024 - 10:15 a.m.

CVE-2023-22576

2024-08-2110:15:04

CWE-269

[email protected]

web.nvd.nist.gov

dell repository manager

local privilege escalation

vulnerability

execution of arbitrary executable

operating system

service unavailability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.5%

JSON

Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. Exploitation may lead to unavailability of the service.

Affected configurations

Nvd

Node

dellrepository_managerRange<3.4.3

VendorProductVersionCPE
dellrepository_manager*cpe:2.3:a:dell:repository_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	repository_manager	*	cpe:2.3:a:dell:repository_manager::::::::

References

www.dell.com/support/kbdoc/en-us/000207513/dsa-2023-017-dell-emc-repository-manager-drm-security-update-for-an-improper-privilege-management-vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.5%

JSON

Related for NVD:CVE-2023-22576

cvelist1 cve1 vulnrichment1