VulnerabilityModified

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability.

HIGH 7.8EPSS 0.20%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Weakness: CWE-284
Affected: dell/rugged control center
Source: security_alert@emc.com

References

https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.