What is the severity of CVE-2023-32479?

CVE-2023-32479 is classified as a privilege escalation vulnerability.

What causes CVE-2023-32479?

CVE-2023-32479 is caused by improper access control lists (ACLs) of the non-default installation directories in affected Dell products.

Can a remote attacker exploit CVE-2023-32479?

No, CVE-2023-32479 can only be exploited by a local malicious user.

Vulnerability/
CVE-2023-32479

high

7.8

CWE

284

6/2/2024

22/8/2024

CVE-2023-32479

Q: How do I fix CVE-2023-32479?

To mitigate CVE-2023-32479, update to Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version 11.9.0 or later.

Q: Who is affected by CVE-2023-32479?

CVE-2023-32479 affects users of Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0.

First published: Tue Feb 06 2024(Updated: )

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
Dell Data Protection \| Encryption	<11.9.0
Dell Endpoint Security Suite Enterprise	<11.9.0
All of
Dell Security Management Server	<11.9.0
Microsoft Windows

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260

Frequently Asked Questions

What is the severity of CVE-2023-32479?
CVE-2023-32479 is classified as a privilege escalation vulnerability.
How do I fix CVE-2023-32479?
To mitigate CVE-2023-32479, update to Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version 11.9.0 or later.
Who is affected by CVE-2023-32479?
CVE-2023-32479 affects users of Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0.
What causes CVE-2023-32479?
CVE-2023-32479 is caused by improper access control lists (ACLs) of the non-default installation directories in affected Dell products.
Can a remote attacker exploit CVE-2023-32479?
No, CVE-2023-32479 can only be exploited by a local malicious user.

agent/weakness
agent/references
agent/description
agent/first-publish-date
agent/type
agent/author
agent/severity
agent/softwarecombine
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/dell
canonical/dell data protection | encryption
canonical/dell endpoint security suite enterprise
canonical/dell security management server
vendor/microsoft
canonical/microsoft windows

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.