Description (CNA)
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / Common Event Enabler | affected N/A before 8.9.10.0 |
CWE
CWE-502
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.