CVE-2023-23696 — Dell / Dell Command Intel vPro Out of Band (DCIV)

Description (CNA)

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.

Affected (CNA)

Vendor / product	Versions
Dell / Dell Command Intel vPro Out of Band (DCIV)	affected 0 before 4.4.0

CWE

CWE-285

References

https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability

CISA-ADP

No English description supplied.

No references supplied.