Описание
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.11.0 (исключая)
cpe:2.3:a:dell:command\|configure:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00031
Низкий
7.3 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other
Связанные уязвимости
CVSS3: 7.3
github
около 2 лет назад
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation.
EPSS
Процентиль: 9%
0.00031
Низкий
7.3 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other