Vulnerability · Published Dec 2, 2023 · Assigned by dell
CVE-2023-39256
High 7.3
In plain English
A high-severity improper access control in Rugged Control Center (RCC) from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 89.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Rugged Control Center (RCC) | Versions prior to 4.7 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340 vendor-advisory