Описание
Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.9 (включая)
cpe:2.3:a:dell:command_\|_monitor:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00048
Низкий
7.3 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-732
CWE-732
Связанные уязвимости
CVSS3: 7.3
github
почти 3 года назад
Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path
EPSS
Процентиль: 15%
0.00048
Низкий
7.3 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-732
CWE-732