CVE-2023-28129 - DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user

HIGH

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user

Published Aug 10, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.32%

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31840		Advisory
https://forums.ivanti.com/s/article/SA-2023-07-26-CVE-2023-28129		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Aug 10, 2023

Updated Oct 9, 2024

Reserved Mar 10, 2023

CISA Vulnrichment

Updated Oct 9, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hackerone

Published Aug 10, 2023

Updated Oct 9, 2024

GitHub

No data