CVE-2023-25543
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-25543
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不充分权限或特权的处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Dell Power Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell Power Manager是美国戴尔（Dell）公司的一款应用程序，用于配置电池维护方式，从而更大限度地提高系统的电池续航时间。 Dell Power Manager 3.14之前版本存在安全漏洞，该漏洞源于在 DPM 服务中包含不当授权漏洞。攻击者利用该漏洞可以提升系统权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | Dell Power Manager (DPM) | 0 ~ 3.14 | - |
II. Public POCs for CVE-2023-25543
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-25543
请登录查看更多情报信息。
Same Patch Batch · Dell · 2024-02-06 · 7 CVEs total
| CVE-2023-32451 | 7.3 HIGH | Dell Display Manager 安全漏洞 |
| CVE-2023-32479 | 6.7 MEDIUM | Dell 多款产品安全漏洞 |
| CVE-2023-28063 | 6.7 MEDIUM | Dell BIOS 安全漏洞 |
| CVE-2023-32474 | 6.6 MEDIUM | Dell Display Manager 后置链接漏洞 |
| CVE-2023-32454 | 6.3 MEDIUM | Dell Update Package（DUP）Framework 后置链接漏洞 |
| CVE-2023-28049 | 4.7 MEDIUM | Dell Command | Monitor 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-280
- CVE-2026-6805
Vulnerability on Cryptobox external sharing feature - CVE-2026-20448
MediaTek Chipsets 安全漏洞 - CVE-2026-27910
Windows Installer Elevation of Privilege Vulnerability - CVE-2026-24096
Insufficient permission validation on multiple REST API Quic - CVE-2026-2123
Privilege escalation vulnerability in Operations Agent
V. Comments for CVE-2023-25543
No comments yet