CVE-2023-23692

CVSS 8.8 - HIGH

Description

Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.

Affected Products

Vendor	Product	Version
dell	emc_data_domain_os	`All versions`
dell	emc_data_domain_os	`All versions`
dell	emc_data_domain_os	`All versions`

References

https://www.dell.com/support/kbdoc/en-us/000201296...

Weakness Types

CWE-78 CWE-78

CVE Information

CVE ID:: CVE-2023-23692
Published:: 2023-02-01
Modified:: 2024-11-21
CVSS Score:: 8.8
Severity:: HIGH
Vector:: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors

dell

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL