7.3
High
CVE-2023-43086 Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability
Description
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Configure (DCC) | Versions not published |
Other CVEs of Dell Command Configure (DCC)
The 4 CVEs of Dell Command Configure (DCC) →
CVE-2023-44289
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability
7.3
High
CVE-2022-34457
Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default…
7.3
High
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability
7.1
High