Incorrect Default Permissions in Dell Command | Intel vPro Out of Band

Executive Summary

Dell Command | Intel vPro Out of Band versions before 4.7.2 have an Incorrect Default Permissions vulnerability. This flaw allows a low-privileged attacker with local access to potentially exploit it and disclose sensitive information.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves incorrect default permissions in Dell Command | Intel vPro Out of Band versions prior to 4.7.2. To detect it, check the installed version of the software on affected systems using commands like 'wmic product get name, version' on Windows or 'dpkg -l | grep dell-command-intel-vpro' on Linux. Compare the version against 4.7.2.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain access to confidential data stored or processed on the affected system due to improper permission settings, leading to unauthorized information disclosure.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data exposure, potentially violating GDPR (data protection) and HIPAA (health information privacy) by failing to maintain confidentiality of sensitive information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Dell Command | Intel vPro Out of Band to version 4.7.2 or later to address the Incorrect Default Permissions vulnerability.

Useful 0 Not Useful 0