Sign-up

ID

VAR-202302-0819


CVE

CVE-2023-23696


TITLE

Dell Command Intel vPro Out of Band Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202302-489

DESCRIPTION

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system

Trust: 1.08

sources: NVD: CVE-2023-23696 // VULHUB: VHN-452172 // VULMON: CVE-2023-23696

AFFECTED PRODUCTS

vendor:dellmodel:command \| intel vpro out of bandscope:ltversion:4.4.0

Trust: 1.0

sources: NVD: CVE-2023-23696

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-23696
value: HIGH

Trust: 1.0

security_alert@emc.com: CVE-2023-23696
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202302-489
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2023-23696
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

security_alert@emc.com: CVE-2023-23696
baseSeverity: HIGH
baseScore: 7.0
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.0
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: CNNVD: CNNVD-202302-489 // NVD: CVE-2023-23696 // NVD: CVE-2023-23696

PROBLEMTYPE DATA

problemtype:CWE-863

Trust: 1.1

problemtype:CWE-285

Trust: 1.0

sources: VULHUB: VHN-452172 // NVD: CVE-2023-23696

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202302-489

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202302-489

PATCH

title:Dell Command Intel vPro Out of Band Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=225395

Trust: 0.6

title: - url:https://github.com/Live-Hack-CVE/CVE-2023-23696

Trust: 0.1

sources: VULMON: CVE-2023-23696 // CNNVD: CNNVD-202302-489

EXTERNAL IDS

db:NVDid:CVE-2023-23696

Trust: 1.8

db:CNNVDid:CNNVD-202302-489

Trust: 0.6

db:VULHUBid:VHN-452172

Trust: 0.1

db:VULMONid:CVE-2023-23696

Trust: 0.1

sources: VULHUB: VHN-452172 // VULMON: CVE-2023-23696 // CNNVD: CNNVD-202302-489 // NVD: CVE-2023-23696

REFERENCES

url:https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability

Trust: 1.8

url:https://cxsecurity.com/cveshow/cve-2023-23696/

Trust: 0.6

url:https://github.com/live-hack-cve/cve-2023-23696

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-452172 // VULMON: CVE-2023-23696 // CNNVD: CNNVD-202302-489 // NVD: CVE-2023-23696

SOURCES

db:VULHUBid:VHN-452172
db:VULMONid:CVE-2023-23696
db:CNNVDid:CNNVD-202302-489
db:NVDid:CVE-2023-23696

LAST UPDATE DATE

2024-08-14T14:37:00.377000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-452172date:2023-02-14T00:00:00
db:VULMONid:CVE-2023-23696date:2023-02-07T00:00:00
db:CNNVDid:CNNVD-202302-489date:2023-02-15T00:00:00
db:NVDid:CVE-2023-23696date:2023-11-07T04:07:52.537

SOURCES RELEASE DATE

db:VULHUBid:VHN-452172date:2023-02-07T00:00:00
db:VULMONid:CVE-2023-23696date:2023-02-07T00:00:00
db:CNNVDid:CNNVD-202302-489date:2023-02-07T00:00:00
db:NVDid:CVE-2023-23696date:2023-02-07T10:15:52.773