What’s Vulnerable › Vulnerabilities

CVE-2023-39257

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-02 · updated 2026-06-17
• Weakness: CWE-284

Description

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege escalation on the system.

Affected products

• Dell Rugged Control Center (RCC): before 4.7 — fixed in 4.7

How to fix

Upgrade to a fixed version: Dell Rugged Control Center (RCC) 4.7. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340
• https://www.dell.com/support/kbdoc/en-us/000217705/dsa-2023-340

Get alerted when CVE-2023-39257 or the next vulnerability affects your stack