VULNERABILITY INTELLIGENCE
CVE-2023-39256
CVSS score7.3 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-12-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system.
Weakness classification
- security_alert@emc.com: CWE-284
- nvd@nist.gov: NVD-CWE-Other
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory