Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU83353
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-28388
CWE-ID:
CWE-426 - Untrusted Search Path
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.
MitigationInstall update from vendor's website.
Vulnerable software versionsInspiron 15 5518: before 10.1.19468.8385
Inspiron 15 5510: before 10.1.19468.8385
Inspiron 14 5418: before 10.1.19468.8385
Inspiron 14 5410: before 10.1.19468.8385
Precision 5530: before 10.1.19468.8385
Precision 5520: before 10.1.19468.8385
Precision 5480: before 10.1.19468.8385
Precision 5470: before 10.1.19468.8385
Precision 3930 Rack: before 10.1.19468.8385
Precision 3650 Tower: before 10.1.19468.8385
Precision 3640: before 10.1.19468.8385
Precision 3620 Tower: before 10.1.19468.8385
Precision 3581: before 10.1.19468.8385
Precision 3580: before 10.1.19468.8385
Precision 3571: before 10.1.19468.8385
Precision 3570: before 10.1.19468.8385
Precision 3561: before 10.1.19468.8385
Precision 3560: before 10.1.19468.8385
Precision 3551: before 10.1.19468.8385
Precision 3550: before 10.1.19468.8385
Precision 3541: before 10.1.19468.8385
Precision 3540: before 10.1.19468.8385
Precision 3530: before 10.1.19468.8385
Precision 3520: before 10.1.19468.8385
Precision 3480: before 10.1.19468.8385
Precision 3470: before 10.1.19468.8385
Precision 3450: before 10.1.19468.8385
Precision 3440: before 10.1.19468.8385
Precision 3420 Tower: before 10.1.19468.8385
Precision 3240 Compact: before 10.1.19468.8385
OptiPlex All-in-One 7410: before 10.1.19468.8385
OptiPlex 7780 All-in-One: before 10.1.19468.8385
OptiPlex 7770 All-In-One: before 10.1.19468.8385
OptiPlex 7760 All-In-One: before 10.1.19468.8385
OptiPlex 7490 All-in-One: before 10.1.19468.8385
OptiPlex 7480 All-in-One: before 10.1.19468.8385
OptiPlex 7470 All-In-One: before 10.1.19468.8385
OptiPlex 7460 All-In-One: before 10.1.19468.8385
OptiPlex 7450 All-In-One: before 10.1.19468.8385
Optiplex 7090 Ultra: before 10.1.19468.8385
OptiPlex 7090 Tower: before 10.1.19468.8385
OptiPlex 7080: before 10.1.19468.8385
OptiPlex 7071: before 10.1.19468.8385
OptiPlex 7070 Ultra: before 10.1.19468.8385
OptiPlex 7070: before 10.1.19468.8385
OptiPlex 7060: before 10.1.19468.8385
OptiPlex 7050: before 10.1.19468.8385
OptiPlex 5490 All-In-One: before 10.1.19468.8385
OptiPlex 5480 All-In-One: before 10.1.19468.8385
OptiPlex 5270 All-In-One: before 10.1.19468.8385
OptiPlex 5260 All-In-One: before 10.1.19468.8385
OptiPlex 5090 Small Form Factor: before 10.1.19468.8385
OptiPlex 5090 Tower: before 10.1.19468.8385
OptiPlex 5090 Micro: before 10.1.19468.8385
OptiPlex 5080: before 10.1.19468.8385
OptiPlex 5070: before 10.1.19468.8385
OptiPlex 5060: before 10.1.19468.8385
OptiPlex 5050: before 10.1.19468.8385
OptiPlex 3280 All-in-One: before 10.1.19468.8385
OptiPlex 3090 Ultra: before 10.1.19468.8385
OptiPlex 3090: before 10.1.19468.8385
OptiPlex 3080: before 10.1.19468.8385
OptiPlex 3070: before 10.1.19468.8385
OptiPlex 3060: before 10.1.19468.8385
OptiPlex 3050 All-In-One: before 10.1.19468.8385
OptiPlex 3050: before 10.1.19468.8385
Latitude 5421: before 10.1.19468.8385
Latitude 3140: before 10.1.19468.8385
Latitude Rugged 7220EX: before 10.1.19468.8385
Latitude 9520: before 10.1.19468.8385
Latitude 9510: before 10.1.19468.8385
Latitude 9440 2-in-1: before 10.1.19468.8385
Latitude 9430: before 10.1.19468.8385
Latitude 9420: before 10.1.19468.8385
Latitude 9410: before 10.1.19468.8385
Latitude 9330: before 10.1.19468.8385
Latitude 7640: before 10.1.19468.8385
Latitude 7530: before 10.1.19468.8385
Latitude 7520: before 10.1.19468.8385
Latitude 7490: before 10.1.19468.8385
Latitude 7480: before 10.1.19468.8385
Latitude 7440: before 10.1.19468.8385
Latitude 7430: before 10.1.19468.8385
Latitude 7424 Rugged Extreme: before 10.1.19468.8385
Latitude 7420: before 10.1.19468.8385
Latitude 7414 Rugged: before 10.1.19468.8385
Latitude 7410: before 10.1.19468.8385
Latitude 7400 2-in-1: before 10.1.19468.8385
Latitude 7400: before 10.1.19468.8385
Latitude 7390 2-in-1: before 10.1.19468.8385
Latitude 7390: before 10.1.19468.8385
Latitude 7389: before 10.1.19468.8385
Latitude 7380: before 10.1.19468.8385
Latitude 7340: before 10.1.19468.8385
Latitude 7330 Rugged Laptop: before 10.1.19468.8385
Latitude 7330: before 10.1.19468.8385
Latitude 7320 Detachable: before 10.1.19468.8385
Latitude 7320: before 10.1.19468.8385
Latitude 7310: before 10.1.19468.8385
Latitude 7300: before 10.1.19468.8385
Latitude 7290: before 10.1.19468.8385
Latitude 7285 2-in-1: before 10.1.19468.8385
Latitude 7280: before 10.1.19468.8385
Latitude 7230 Rugged Extreme: before 10.1.19468.8385
Latitude 7220 Rugged Extreme: before 10.1.19468.8385
Latitude 7212 Rugged Extreme Tablet: before 10.1.19468.8385
Latitude 7210 2-in-1: before 10.1.19468.8385
Latitude 7200 2-in-1: before 10.1.19468.8385
Latitude 5591: before 10.1.19468.8385
Latitude 5590: before 10.1.19468.8385
Latitude 5580: before 10.1.19468.8385
Latitude 5540: before 10.1.19468.8385
Latitude 5531: before 10.1.19468.8385
Latitude 5530: before 10.1.19468.8385
Latitude 5521: before 10.1.19468.8385
Latitude 5520: before 10.1.19468.8385
Latitude 5511: before 10.1.19468.8385
Latitude 5510: before 10.1.19468.8385
Latitude 5501: before 10.1.19468.8385
Latitude 5500: before 10.1.19468.8385
Latitude 5491: before 10.1.19468.8385
Latitude 5490: before 10.1.19468.8385
Latitude 5488: before 10.1.19468.8385
Latitude 5480: before 10.1.19468.8385
Latitude 5440: before 10.1.19468.8385
Latitude 5431: before 10.1.19468.8385
Latitude 5430 Rugged Laptop: before 10.1.19468.8385
Latitude 5430: before 10.1.19468.8385
Latitude 5424 Rugged: before 10.1.19468.8385
Latitude 5420 Rugged: before 10.1.19468.8385
Latitude 5420: before 10.1.19468.8385
Latitude 5414 Rugged: before 10.1.19468.8385
Latitude 5411: before 10.1.19468.8385
Latitude 5410: before 10.1.19468.8385
Latitude 5401: before 10.1.19468.8385
Latitude 5400: before 10.1.19468.8385
Latitude 5340: before 10.1.19468.8385
Latitude 5330: before 10.1.19468.8385
Latitude 5310 2-IN-1: before 10.1.19468.8385
Latitude 5310: before 10.1.19468.8385
Latitude 5300 2-IN-1: before 10.1.19468.8385
Latitude 5300: before 10.1.19468.8385
Latitude 5290 2-in-1: before 10.1.19468.8385
Latitude 5290: before 10.1.19468.8385
Latitude 5289: before 10.1.19468.8385
Latitude 5288: before 10.1.19468.8385
Latitude 5285 2-in-1: before 10.1.19468.8385
Latitude 5280: before 10.1.19468.8385
Latitude 3540: before 10.1.19468.8385
Latitude 3530: before 10.1.19468.8385
Latitude 3520: before 10.1.19468.8385
Latitude 3510: before 10.1.19468.8385
Latitude 3500: before 10.1.19468.8385
Latitude 3440: before 10.1.19468.8385
Latitude 3430: before 10.1.19468.8385
Latitude 3420: before 10.1.19468.8385
Latitude 3410: before 10.1.19468.8385
Latitude 3400: before 10.1.19468.8385
Latitude 3390 2-in-1: before 10.1.19468.8385
Latitude 3340: before 10.1.19468.8385
Latitude 3330: before 10.1.19468.8385
Latitude 3320: before 10.1.19468.8385
Latitude 3310 2-in-1: before 10.1.19468.8385
Latitude 3310: before 10.1.19468.8385
Latitude 3301: before 10.1.19468.8385
Latitude 3300: before 10.1.19468.8385
Latitude 3190 2-In-1: before 10.1.19468.8385
Latitude 3190: before 10.1.19468.8385
Latitude 3120: before 10.1.19468.8385
Latitude 13 3380: before 10.1.19468.8385
Latitude 12 Rugged Extreme 7214: before 10.1.19468.8385
Inspiron 7790: before 10.1.19468.8385
Inspiron 7706 2-in-1: before 10.1.19468.8385
Inspiron 7700 All-In-One: before 10.1.19468.8385
Inspiron 7610: before 10.1.19468.8385
Inspiron 7510: before 10.1.19468.8385
Inspiron 7506 2-in-1: before 10.1.19468.8385
Inspiron 7501: before 10.1.19468.8385
Inspiron 7500 2-in-1 Silver: before 10.1.19468.8385
Inspiron 7500: before 10.1.19468.8385
Inspiron 7490: before 10.1.19468.8385
Inspiron 7400: before 10.1.19468.8385
Inspiron 7306 2-in-1: before 10.1.19468.8385
Inspiron 7300: before 10.1.19468.8385
Inspiron 5620: before 10.1.19468.8385
Inspiron 5593: before 10.1.19468.8385
Inspiron 5509: before 10.1.19468.8385
Inspiron 5508: before 10.1.19468.8385
Inspiron 5502: before 10.1.19468.8385
Inspiron 5501: before 10.1.19468.8385
Inspiron 5491 AIO: before 10.1.19468.8385
Inspiron 5490 AIO: before 10.1.19468.8385
Inspiron 5420: before 10.1.19468.8385
Inspiron 5410: before 10.1.19468.8385
Inspiron 5409: before 10.1.19468.8385
Inspiron 5408: before 10.1.19468.8385
Inspiron 5406 2-in-1: before 10.1.19468.8385
Inspiron 5402: before 10.1.19468.8385
Inspiron 5401 AIO: before 10.1.19468.8385
Inspiron 5401: before 10.1.19468.8385
Inspiron 5400: before 10.1.19468.8385
Inspiron 5320: before 10.1.19468.8385
Inspiron 5310: before 10.1.19468.8385
Inspiron 5301: before 10.1.19468.8385
Inspiron 5300: before 10.1.19468.8385
Inspiron 3891: before 10.1.19468.8385
Inspiron 3881: before 10.1.19468.8385
Inspiron 3880: before 10.1.19468.8385
Inspiron 3793: before 10.1.19468.8385
Inspiron 3671: before 10.1.19468.8385
Inspiron 3670: before 10.1.19468.8385
Inspiron 3593: before 10.1.19468.8385
Inspiron 3581: before 10.1.19468.8385
Inspiron 3580: before 10.1.19468.8385
Inspiron 3511: before 10.1.19468.8385
Inspiron 3510: before 10.1.19468.8385
Inspiron 3502: before 10.1.19468.8385
Inspiron 3501: before 10.1.19468.8385
Inspiron 3480: before 10.1.19468.8385
Inspiron 3471: before 10.1.19468.8385
Inspiron 3470: before 10.1.19468.8385
Inspiron 3280: before 10.1.19468.8385
Inspiron 27 7720 All-in-One: before 10.1.19468.8385
Inspiron 27 7710 All-in-One: before 10.1.19468.8385
Inspiron 24 5420 All-in-One: before 10.1.19468.8385
Inspiron 24 5411 All-in-One: before 10.1.19468.8385
Inspiron 24 5410 All-in-One: before 10.1.19468.8385
Inspiron 16 Plus 7630: before 10.1.19468.8385
Inspiron 16 Plus 7620: before 10.1.19468.8385
Inspiron 16 7630 2-in-1: before 10.1.19468.8385
Inspiron 16 7620 2-in-1: before 10.1.19468.8385
Inspiron 16 5630: before 10.1.19468.8385
Inspiron 15 5510/5518: before 10.1.19468.8385
Inspiron 15 3530: before 10.1.19468.8385
Inspiron 15 3521: before 10.1.19468.8385
Inspiron 15 3520: before 10.1.19468.8385
Inspiron 15 3511: before 10.1.19468.8385
Inspiron 14 Plus 7430: before 10.1.19468.8385
Inspiron 14 Plus 7420: before 10.1.19468.8385
Inspiron 14 7430 2-in-1: before 10.1.19468.8385
Inspiron 14 7420 2-in-1: before 10.1.19468.8385
Inspiron 14 5430: before 10.1.19468.8385
Inspiron 14 5410/5418: before 10.1.19468.8385
Dell Precision 3630 Tower: before 10.1.19468.8385
Dell Precision 3431 Tower: before 10.1.19468.8385
Dell Precision 3430 Tower: before 10.1.19468.8385
Dell G7 7700: before 10.1.19468.8385
Dell G7 7500: before 10.1.19468.8385
Dell G5 5500: before 10.1.19468.8385
Dell G5 5090: before 10.1.19468.8385
Dell G5 5000: before 10.1.19468.8385
Dell G3 3500: before 10.1.19468.8385
Dell G16 7630: before 10.1.19468.8385
Dell G16 7620: before 10.1.19468.8385
Dell G15 5530: before 10.1.19468.8385
Dell G15 5520: before 10.1.19468.8385
Dell G15 5511: before 10.1.19468.8385
Dell G15 5510: before 10.1.19468.8385
ChengMing 3991: before 10.1.19468.8385
ChengMing 3990: before 10.1.19468.8385
ChengMing 3988: before 10.1.19468.8385
ChengMing 3980 TOWER: before 10.1.19468.8385
Alienware 17 R1: before 10.1.19468.8385
Alienware 15 R1: before 10.1.19468.8385
Alienware x17 R2: before 10.1.19468.8385
Alienware x17 R1: before 10.1.19468.8385
Alienware x16 R1: before 10.1.19468.8385
Alienware x15 R2: before 10.1.19468.8385
Alienware x15 R1: before 10.1.19468.8385
Alienware x14 R2: before 10.1.19468.8385
Alienware x14: before 10.1.19468.8385
Alienware m18 R1: before 10.1.19468.8385
Alienware m17 R4: before 10.1.19468.8385
Alienware m17 R3: before 10.1.19468.8385
Alienware m17 R2: before 10.1.19468.8385
Alienware m16 R1: before 10.1.19468.8385
Alienware m15 R7: before 10.1.19468.8385
Alienware m15 R6: before 10.1.19468.8385
Alienware m15 R4: before 10.1.19468.8385
Alienware m15 R3: before 10.1.19468.8385
Alienware m15 R2: before 10.1.19468.8385
Alienware Aurora R15: before 10.1.19468.8385
Alienware Aurora R13: before 10.1.19468.8385
Alienware Aurora R12: before 10.1.19468.8385
Alienware Aurora R11: before 10.1.19468.8385
Alienware Area 51m R2: before 10.1.19468.8385
Alienware Area 51m R1: before 10.1.19468.8385
External linkshttp://www.dell.com/support/kbdoc/nl-nl/000217774/dsa-2023-345
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.