What’s Vulnerable › Vulnerabilities

CVE-2023-28068

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-05 · updated 2026-06-17
• Weakness: CWE-732

Description

Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privilege escalation by writing to a protected directory when Dell Command Monitor is installed to a non-default path

Affected products

• Dell Command Monitor (DCM): through 10.9

References

• https://www.dell.com/support/kbdoc/en-us/000212226/dsa-2023-133
• https://www.dell.com/support/kbdoc/en-us/000212226/dsa-2023-133

Get alerted when CVE-2023-28068 or the next vulnerability affects your stack