Lucene search
+L

77 matches found

Prion
Prion
•added 2023/02/13 8:15 a.m.•29 views

Arbitrary file deletion

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

1.7CVSS4.3AI score0.00177EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/13 7:24 a.m.•31 views

CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

4.7CVSS5.2AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/13 7:24 a.m.•15 views

CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

4.7CVSS6.9AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/13 7:24 a.m.•63 views

CVE-2023-23697

The CVE concerns Dell Command | Intel vPro Out of Band, prior to version 4.4.0, with an arbitrary folder deletion vulnerability triggered during uninstallation. A locally authenticated attacker may exploit this to delete folders. Publicly documented impact is limited to uninstallation-time operat...

4.7CVSS4.3AI score0.00177EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/13 12:00 a.m.•2 views

CVE-2023-23697: Insecure Operation on Windows Junction / Mount Point

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

4.7CVSS6AI score0.00177EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/13 12:00 a.m.•18 views

Dell Command | Intel vPro Out of Band 后置链接漏洞

Dell Command | Intel vPro Out of Band is an application from Dell, Inc. that provides an out-of-band management solution. You are able to remotely manage client systems regardless of the power status of the system. A security vulnerability exists in Dell Command | Intel vPro Out of Band prior to...

4.7CVSS4.9AI score0.00177EPSS
SaveExploits0References2
NVD
NVD
•added 2023/02/07 10:15 a.m.•23 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7.8CVSS7.2AI score0.00463EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/07 10:15 a.m.•13 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7.8CVSS5.9AI score0.00463EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/07 10:15 a.m.•25 views

Authorization

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

4.3CVSS7.6AI score0.00463EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/02/07 9:49 a.m.•81 views

CVE-2023-23696

Dell Command Intel vPro Out of Band prior to 4.3.1 is affected by an Improper Authorization vulnerability (CVE-2023-23696). A locally authenticated attacker could potentially write arbitrary files to the system. Affected software is Dell Command Intel vPro Out of Band; remediation is to upgrade t...

7.8CVSS7.5AI score0.00463EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/07 9:49 a.m.•27 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7CVSS7.8AI score0.00463EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/07 9:49 a.m.•7 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7CVSS7.1AI score0.00463EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/07 12:00 a.m.•16 views

PT-2023-1580 · Dell · Dell Command | Intel Vpro Out Of Band

Name of the Vulnerable Software and Affected Versions: Dell Command Intel vPro Out of Band versions prior to 4.3.1 Description: The issue is related to an Improper Authorization vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to write arbitrary...

7.8CVSS7.5AI score0.00463EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/07 12:00 a.m.•2 views

CVE-2023-23696: Improper Authorization

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7.8CVSS6AI score0.00463EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/02/05 10:59 p.m.•6 views

Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
OSV
OSV
•added 2023/02/05 10:59 p.m.•13 views

MAL-2023-943 Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References2
Lenovo
Lenovo
•added 2023/01/06 7:36 p.m.•11 views

Intel PROSet Wireless WiFi, Intel vPro CSME WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/12/22 12:00 a.m.•19 views

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi allows a malicious actor to cause service interruptions.

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.5CVSS6.6AI score0.00419EPSS
SaveExploits0References3Affected Software7
OSV
OSV
•added 2022/11/11 4:15 p.m.•18 views

CVE-2022-26047

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

6.5CVSS5.8AI score0.00419EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/11 4:15 p.m.•33 views

CVE-2022-26047

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

6.5CVSS0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder