CVE-2023-32479

Medium

Description

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.

SeverityMedium

CVSS6.7

Exploit probability—

ProductDell Encryption

PublishedFeb 6, 2024

First seenFeb 6, 2024

Weakness typeCWE-284Improper access control

How to fix

Update

dell encryption11.9.0 or later
dell endpoint_security_suite_enterprise11.9.0 or later
dell security_management_server11.9.0 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000215881/dsa-2023-260

Affected products

Product	Affected versions	Fixed in
dell encryption	v < 11.9.0	11.9.0
dell endpoint_security_suite_enterprise	v < 11.9.0	11.9.0
dell security_management_server	v < 11.9.0	11.9.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.