Vulnerability Description
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Endpoint Security Suite Enterprise | < 11.8.1 |
| Dell | Encryption | < 11.8.1 |
| Dell | Security Management Server | < 11.8.1 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000217572/dsa-2023-271Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000217572/dsa-2023-271Vendor Advisory
FAQ
What is CVE-2023-39246?
CVE-2023-39246 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installati...
How severe is CVE-2023-39246?
CVE-2023-39246 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-39246?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Endpoint Security Suite Enterprise, Dell Encryption, Dell Security Management Server, Microsoft Windows.