PT-2023-13377 · Dell · Dell Openmanage Server Administrator

·

CVE-2022-34396

·

Published

2023-02-01

·

Updated

2023-02-08

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator (OMSA) versions 10.3.0.0 and earlier
Description The issue allows a local low privileged authenticated attacker to potentially exploit a DLL Injection Vulnerability, leading to the execution of arbitrary executables on the operating system with elevated privileges. This could result in a complete system compromise.
Recommendations For versions 10.3.0.0 and earlier, update to a version later than 10.3.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-34396

Affected Products

Dell Openmanage Server Administrator