CVE-2023-43086
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.
Risk Assessment
Privilege escalation could allow a local attacker to gain higher privileges on the system, potentially leading to full compromise.
Recommendation
It is recommended to update Dell Command | Configure to version 4.11.0 or later, which includes the fix.
Other vulnerabilities in Dell Command | Configure
See all- CVE-2026-82162High
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
- CVE-2026-70414Medium
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
- CVE-2026-103778Medium
Dell Command | Configure (DCC) versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Original NVD description (English source)
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS