CVE-2023-32479
Last modified
CVE-2023-32479 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation. . EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Encryption | < 11.9.0 |
| Dell | Endpoint Security Suite Enterprise | < 11.9.0 |
| Dell | Security Management Server | < 11.9.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32479?
How severe is CVE-2023-32479?
How do I fix CVE-2023-32479?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32472Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …8.2
- CVE-2023-32474 Dell Display Manager application, version 2.1.1.17 and prio…6.6
- CVE-2023-32475Dell BIOS contains a missing support for integrity check vul…7.6
- CVE-2023-32476 Dell Hybrid Client version 2.0 contains a Sensitive Data Ex…5.5
- CVE-2023-32477 Dell Common Event Enabler 8.9.8.2 for Windows and prior, co…7.8
- CVE-2023-32478 Dell PowerStore versions prior to 3.5.0.1 contain an insert…4.9
- CVE-2023-3248The All-in-one Floating Contact Form WordPress plugin before…4.8
- CVE-2023-32480 Dell BIOS contains an Improper Input Validation vulnerabili…6.8
- CVE-2023-32481 Wyse Management Suite versions prior to 4.0 contain a denia…6.5
- CVE-2023-32482 Wyse Management Suite versions prior to 4.0 contain an impr…4.9
- CVE-2023-32483 Wyse Management Suite versions prior to 4.0 contain a sensi…4.4
- CVE-2023-32484 Dell Networking Switches running Enterprise SONiC versions …9.8
Are you affected by CVE-2023-32479?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST