Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-02176
HistoryNov 24, 2023 - 12:00 a.m.

Dell Command Monitor Elevation of Privilege Vulnerability

2023-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
dell command monitor
system management
elevation of privilege
vulnerability
unauthorized access
bios settings
fleet inventory
network devices
device management

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system cost of ownership and is part of a holistic approach to managing all network devices. An elevation of privilege vulnerability exists in Dell Command Monitor versions prior to 10.10.0. The vulnerability is caused due to a failure to restrict access to resources by unauthorized participants. A local malicious attacker could exploit this vulnerability to cause elevation of privilege when fixing/changing an installation.

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

Related for CNVD-2024-02176