CVE-2023-28046 - Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges

Back Back to CVE browser

HIGH

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges

Published Apr 6, 2023

7.1

HIGH

CVSS 3.1

EPSS 0.14%

Description

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges.

Affected products

Vendor Dell Product Dell Display Manager Default
unaffected
- Version
  2.1.0 and prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Dell Display Manager

unaffected

Version	Status	Constraints
2.1.0 and prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-272

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31771
Advisory
https://www.dell.com/support/kbdoc/en-us/000211727/dsa-2023
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31771		Advisory
https://www.dell.com/support/kbdoc/en-us/000211727/dsa-2023		vendor-advisoryPatchVendor Advisory