CVE-2023-23697

MediumCVSS 4.7

Published: 13/02/2023(UTC)Updated: 28/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Dell Command | Intel vPro Out of Band versions before 4.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability, leading to arbitrary folder deletion.

Risk Assessment

The vulnerability may allow a local attacker to delete arbitrary folders on the system, potentially causing data loss or system instability. However, it requires local authentication.

Recommendation

Update Dell Command | Intel vPro Out of Band to version 4.4.0 or later. Also restrict local user privileges to the minimum necessary.

Other vulnerabilities in Dell Command | Intel vPro Out of Band

CVE-2026-82163Medium
Dell Command | Intel vPro Out of Band versions prior to 4.7.2 contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Original NVD description (English source)

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS