CVE-2023-28066

CVE-2023-28066 affects Dell OS Recovery Tool, specifically versions 2.2.4013 and 2.3.7012.0. The vulnerability is described as Improper Access Control, where a local authenticated non-administrator user could potentially elevate privileges on the system. The available connected documents confirm ...

CVE-2023-39253

Dell OS Recovery Tool (versions 2.2.4013, 2.3.7012.0, 2.3.7515.0) contains an Improper Access Control Vulnerability. A locally authenticated, non-administrator user could potentially exploit this to achieve elevation of privilege on the system. This CVE (CVE-2023-39253) is supported by multiple s...

CVE-2023-39259

Dell OS Recovery Tool (versions 2.2.4013, 2.3.7012.0, 2.3.7515.0) contains an improper access control vulnerability that could allow a locally authenticated non-administrator user to elevate privileges. Several connected sources describe this as a local-privilege-elevation issue arising from insu...