PT-2024-12150 · Dell · Dell Command | Monitor

Ycdxsb · Published 2024-02-06 · Updated 2024-02-13 · CVE-2023-28049

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Command | Monitor versions prior to 10.9

Description The issue allows a locally authenticated malicious user to perform a privileged arbitrary file delete by exploiting an arbitrary folder deletion vulnerability.

Recommendations For versions prior to 10.9, update to version 10.9 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and folders to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-267

Related Identifiers

CVE-2023-28049

Affected Products

Dell Command | Monitor

References · 7

• https://dell.com/support/kbdoc/en-us/000211748/dsa-2023-125-dell-command-monitor-dcm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28049 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28049 · Vendor Advisory
• https://t.me/cvenotify/71351 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1754838849404944711 · Twitter Post
• https://twitter.com/CVEnew/status/1754771337279832450 · Twitter Post
• https://t.me/cvenotify/70172 · Telegram Post