Lucene search

K
nvd[email protected]NVD:CVE-2023-23697
HistoryFeb 13, 2023 - 8:15 a.m.

CVE-2023-23697

2023-02-1308:15:10
CWE-59
CWE-1386
web.nvd.nist.gov
2
dell command intel vpro
arbitrary folder delete
uninstallation vulnerability

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0

Percentile

13.2%

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.

Affected configurations

Nvd
Node
dellcommand_\|_intel_vpro_out_of_bandRange<4.4.0
VendorProductVersionCPE
dellcommand_\|_intel_vpro_out_of_band*cpe:2.3:a:dell:command_\|_intel_vpro_out_of_band:*:*:*:*:*:*:*:*

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0

Percentile

13.2%

Related for NVD:CVE-2023-23697