7.0
High
CVE-2023-23696 Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability
Description
Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Intel vPro Out of Band (DCIV) 4.4 | earliest → < 4.4.0 | 4.4.0 |