VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Nov 16, 2023· Updated Jun 17, 2026

CVE-2023-39246

CVE-2023-39246

Description

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Dell/Encryption2 versions
    cpe:2.3:a:dell:encryption:*:*:*:*:enterprise:*:*:*+ 1 more
    • cpe:2.3:a:dell:encryption:*:*:*:*:enterprise:*:*:*range: <11.8.1
    • (no CPE)range: <11.8.1
  • Dell/Endpoint Security Suite Enterprise2 versions
    cpe:2.3:a:dell:endpoint_security_suite_enterprise:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:endpoint_security_suite_enterprise:*:*:*:*:*:*:*:*range: <11.8.1
    • (no CPE)range: <11.8.1
  • Dell/Security Management Server
    cpe:2.3:a:dell:security_management_server:*:*:*:*:*:*:*:*
    Range: <11.8.1
  • Dell/Dell Security Management Serverllm-fuzzy
    Range: <11.8.1
  • Dell/Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server (Windows)v5
    Range: Versions prior to 11.8.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.