Description
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by replacing binaries in installed directory and taking reverse shell of the system leading to Privilege Escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Dell Encryption | < 11.9.0 | 11.9.0 |
| Dell | Dell Endpoint Security Suite Enterprise | < 11.9.0 | 11.9.0 |
| Dell | Dell Security Management Server (Windows) | < 11.9.0 | 11.9.0 |
References
- https://www.dell.com/support/kbdoc/en-us/000215881/dsa-2023-260 vendor-advisory