CVEvulnerability
CVE-2023-39257
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege escalation on the system.
Affected configurations
• dell rugged control center (< 4.7)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340 Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340 Vendor Advisory