CVE-2023-28079 — Dell / PowerPath Windows

Description (CNA)

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM.

Affected (CNA)

Vendor / product	Versions
Dell / PowerPath Windows	affected 7.0, 7.1 & 7.2

CWE

CWE-276

References

https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.