CVE-2023-22576 Privilege escalation in Dell Repository Manager (DRM)
A local attacker can exploit a vulnerability in Dell Repository Manager to execute arbitrary code with high privileges, potentially causing service unavailability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22576?
CVE-2023-22576 is a high-severity vulnerability in Dell Repository Manager (DRM), published on 21 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges using the existing vulnerability in operating system. Exploitation may lead to unavailability of the service.
Weakness: CWE-269
Which versions are affected by CVE-2023-22576?
It affects 1 product.
Products include Dell Repository Manager.
How do I fix CVE-2023-22576?
No fix has been published for CVE-2023-22576 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-22576 being exploited?
There is no known exploitation of CVE-2023-22576 in the wild and no public exploit code.
Other vulnerabilities in Dell Repository Manager (DRM)
- CVE-2024-28976 Path traversal in Dell Repository Manager (DRM)
- CVE-2025-45376 Privilege escalation in Dell Repository Manager (DRM)
- CVE-2026-21420 Path traversal in Repository Manager
- CVE-2023-44282 Privilege escalation in Dell Repository Manager (DRM)
- CVE-2023-44292 Privilege escalation in Dell Repository Manager (DRM)
Sources
Also known as GHSA-pw4h-rqvq-8h46.