Lucene search

DellCVELIST:CVE-2023-44281

HistoryJan 24, 2024 - 3:38 p.m.

CVE-2023-44281

2024-01-2415:38:32

CWE-264

dell

www.cve.org

dell pair installer

vulnerability

elevation of privilege

arbitrary files

denial of service

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

EPSS

Percentile

5.1%

JSON

Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potentially exploit this vulnerability to delete arbitrary files and result in Denial of Service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Pair",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000219185/dsa-2023-141

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-44281