Vulnerability Details CVE-2023-43079
Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute arbitrary code in order to elevate privileges on the system. Exploitation may lead to a complete system compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 7.3
References
- https://www.dell.com/support/kbdoc/en-us/000218469/dsa-2023-367-dell-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000218469/dsa-2023-367-dell-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities
Products affected by CVE-2023-43079
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:11.0.0.0
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.1
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.1.0
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.1.0.1
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.1.0.2
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.2
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.2.0.1
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.2.0.2
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.3.0
-
cpe:2.3:a:dell:emc_openmanage_server_administrator:9.4