Vulnerability Description
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Encryption | < 11.9.0 |
| Dell | Endpoint Security Suite Enterprise | < 11.9.0 |
| Dell | Security Management Server | < 11.9.0 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260Vendor Advisory
FAQ
What is CVE-2023-32479?
CVE-2023-32479 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-defaul...
How severe is CVE-2023-32479?
CVE-2023-32479 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-32479?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server, Microsoft Windows.