BaseFortify

Executive Summary

Dell Command | Configure (DCC) versions before 5.2.3.35 have a hard-coded cryptographic key issue. An attacker with local access could exploit this to disclose sensitive information without authentication.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the installed version of Dell Command | Configure (DCC) on your system. If the version is prior to 5.2.3.35, the system is vulnerable. Use commands like 'wmic product get name, version' on Windows or 'dpkg -l | grep dcc' on Linux to verify the installed version.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this could allow unauthorized access to sensitive data stored or processed on systems running vulnerable DCC versions. Local access is required, but no further authentication is needed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized information disclosure, potentially violating GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive personal or health information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Dell Command | Configure (DCC) to version 5.2.3.35 or later to address the hard-coded cryptographic key vulnerability. Ensure only authorized users have local access to systems running affected versions.

Useful 0 Not Useful 0