Lucene search

K
nvd[email protected]NVD:CVE-2023-32477
HistorySep 29, 2023 - 8:15 a.m.

CVE-2023-32477

2023-09-2908:15:09
CWE-284
web.nvd.nist.gov
1
dell
common event enabler
windows
access control
vulnerability
elevated privileges

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges.

Affected configurations

Nvd
Node
dellcommon_event_enablerRange8.9.8.2windows
VendorProductVersionCPE
dellcommon_event_enabler*cpe:2.3:a:dell:common_event_enabler:*:*:*:*:*:windows:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-32477