What is CVE-2023-32479?

CVE-2023-32479 is a medium-severity vulnerability in Dell Encryption, classified under Improper Access Control. CVSS score: 6.7/10. Published 2024-02-06.

How severe is CVE-2023-32479?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Is CVE-2023-32479 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Dell Encryption

CVE-2023-32479

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malic…

EPSS: 0.001 (0.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Dell Encryption — versions 0
Dell Endpoint Security Suite Enterprise — versions 0
Dell Security Management Server (Windows) — versions 0
Dell Encryption
Dell Endpoint_security_suite_enterprise
Dell Security_management_server
Microsoft Windows

Weakness classification (CWE)

CWE-284 — Improper Access Control

Public proof-of-concept exploits

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32479?: CVE-2023-32479 is a medium-severity vulnerability in Dell Encryption, classified under Improper Access Control. CVSS score: 6.7/10. Published 2024-02-06.
How severe is CVE-2023-32479?: Medium severity. CVSS v3 base score is 6.7 out of 10.
Is CVE-2023-32479 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.