VULNERABILITY INTELLIGENCE
CVE-2023-39257
CVSS score7.3 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-12-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege escalation on the system.
Weakness classification
- security_alert@emc.com: CWE-284
- nvd@nist.gov: NVD-CWE-Other
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory