{"id":"CVE-2023-43086","title":"\nDell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability","summary":"\nDell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege esc…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-284"],"vendor":"dell","product":"command|configure","affected":["command|configure < 4.11.0"],"patched":["command|configure 4.11.0"],"published":"2023-11-23","updated":"2026-10-07","sourceUpdated":"2026-10-07T21:17:05.873","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-43086","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000218424/dsa-2023-387-security-update-for-a-dell-command-configure-vulnerability","label":"security_alert@emc.com"},{"url":"https://www.dell.com/support/kbdoc/en-us/000218424/dsa-2023-387-security-update-for-a-dell-command-configure-vulnerability","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"epss":0.00219,"epssPercentile":0.11354,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2023-12-14T16:09:22.948948Z"},"ingestedAt":"2026-10-07T20:46:46.998Z","slug":"CVE-2023-43086","body":"## Overview\n\n\nDell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.\n\n\n\n## Affected\n\n- `command|configure < 4.11.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `command|configure 4.11.0`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}