7.3
High
CVE-2023-28068 Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability
Description
Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Monitor (DCM) | Versions not published |
Other CVEs of Dell Command Monitor (DCM)
The 4 CVEs of Dell Command Monitor (DCM) →
CVE-2023-28049
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability
4.7
Medium
CVE-2023-44290
Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability
7.3
High
CVE-2023-24573
Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation
4.7
Medium