CVE-2023-32479

CVE-2023-32479 affects Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server (all versions prior to 11.9.0). Root cause: improper ACLs in the non-default installation directory allow a local attacker to replace binaries and escalate privileges (e.g., obtain...

CVE-2020-5358

CVE-2020-5358 affects Dell Encryption before 10.7 and Dell Endpoint Security Suite before 2.7. Root cause: incorrect permissions enabling a local malicious user to gain elevated privileges via a symbolic link. Exploitation status is not provided in the documents. Connected CVE-2020-5385 notes an ...

CVE-2018-15766

Dell Encryption (versions before 10.0.1) and Dell Endpoint Security Suite Enterprise (before 2.0.1) are affected by a vulnerability where, during installation of the Encryption Management Agent (EMAgent), the Minimum Password Length GPO is overwritten to 1. This allows bypassing the password-leng...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server are affected by CVE-2023-39246 due to an Insecure Operation on Windows Junction during installation. The issue allows a local attacker with low privileges and no user interaction to create an arbitrary f...

CVE-2019-3745

The CVE-2019-3745 issue affects Dell Encryption Enterprise prior to 10.4.0 and Dell Endpoint Security Suite Enterprise prior to 2.4.0. It is exploitable only during product installation by an administrator. A local authenticated low-privilege user could stage a malicious DLL in the installer's se...

CVE-2020-5385

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a local privilege-escalation vulnerability stemming from an incomplete fix for CVE-2020-5358 (incorrect permissions). A local attacker with low privileges could elevate privileges via a symbolic ...