CVE-2023-32450 MEDIUM

CVE-2023-32450

Vendor Dell

Product Dell Power Manager (DPM)

Weakness CWE-379

Published July 27, 2023

Last update October 15, 2024

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

What the vulnerability does

01Description

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access.

Key dates

02Disclosure timeline

July 27, 2023 CVE published

October 15, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-32450 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/379.html

Related vulnerabilities

04Related CVE

CVE-2020-8831 World writable root owned lock file created in user controllable location CVE-2023-38533 CVE-2021-28568 Adobe Genuine Services insecure file permission could lead to privilege escalation CVE-2016-9486 On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are created in a folder with incorrect privileges CVE-2025-33111 IBM Controller Information Disclosure