7.8
High
CVE-2020-5342 Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability
Description
Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Digital Delivery (Cirrus) 3.5 | earliest → < 3.5.2013.0 | 3.5.2013.0 |