CVE-2023-22576
Last modified
CVE-2023-22576 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. Exploitation may lead to unavailability of the service.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Repository Manager | < 3.4.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-22576?
How severe is CVE-2023-22576?
How do I fix CVE-2023-22576?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-2256The Product Addons & Fields for WooCommerce WordPress plugin…6.1
- CVE-2023-2257Authentication Bypass in Hub Business integration in Devolut…7.8
- CVE-2023-22572 Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion …7.8
- CVE-2023-22573Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion o…5.5
- CVE-2023-22574 Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertio…8.1
- CVE-2023-22575Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion…8.8
- CVE-2023-22577Within White Rabbit Switch it's possible as an unauthenticat…7.5
- CVE-2023-22578Due to improper artibute filtering in the sequalize js libra…9.8
- CVE-2023-22579Due to improper parameter filtering in the sequalize js libr…8.8
- CVE-2023-2258Improper Neutralization of Formula Elements in a CSV File in…8.8
- CVE-2023-22580Due to improper input filtering in the sequalize js library,…7.5
- CVE-2023-22581White Rabbit Switch contains a vulnerability which makes it …9.8
Are you affected by CVE-2023-22576?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST