CVE-2023-39259 (published 2023-11-16T09:02:01.739Z)

Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system.


Affected products: Vendor: Dell
Product: Dell OS Recovery Tool
Versions: Versions 2.3.7012.0, 2.2.4013, and 2.3.7515.0.