CVE-2023-28066

CVE-2023-28066 affects Dell OS Recovery Tool, specifically versions 2.2.4013 and 2.3.7012.0. The vulnerability is described as Improper Access Control, where a local authenticated non-administrator user could potentially elevate privileges on the system. The available connected documents confirm ...

CVE-2023-28066

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...

Dell OS Recovery Tool 访问控制错误漏洞

Dell OS Recovery Tool is an operating system recovery tool from Dell USA. An Access Control Error vulnerability exists in Dell OS Recovery Tool versions 2.2.4013, 2.3.7012.0, which stems from the inclusion of improper access control and could be exploited to elevate system privileges...

PT-2023-21528

Name of the Vulnerable Software and Affected Versions Dell OS Recovery Tool versions 2.2.4013 through 2.3.7012.0 Description The issue is related to an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this to elevate privileges on the...

CVE-2023-28066: Improper Access Control

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2022-26865

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

Authentication flaw

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

CVE-2022-26865

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

CVE-2022-26865

Dell SupportAssist OS Recovery is affected by an Authentication Bypass in versions before 5.5.2. An unauthenticated attacker with physical access can bypass OS Recovery authentication and run arbitrary code as Administrator. Root cause: bypass of OS Recovery authentication. Impact: full administr...

CVE-2022-26865: Authentication Bypass Using an Alternate Path or Channel

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

PT-2022-18112

Name of the Vulnerable Software and Affected Versions Dell Support Assist OS Recovery versions prior to 5.5.2 Description The issue allows an unauthenticated attacker with physical access to the system to bypass OS Recovery authentication, enabling them to run arbitrary code on the system as...

CVE-2022-26865

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

Dell OS recovery unauthorized access vulnerability

Dell OS recovery is a system recovery software from Dell USA. Dell OS recovery has an unauthorized access vulnerability that can be exploited by an attacker to cause unauthorized access to folders...