CVE-2009-5152 Information
Feb 14, 2021
cve
Description
Absolute Computrace Agent as distributed on certain Dell Inspiron systems through 2009 has a race condition with the Dell Client Configuration Utility (DCCU) which allows privileged local users to change Computrace Agent’s activation/deactivation status to the factory default via a crafted TaskResult.xml file.
CVSS Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
Reference
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction Required
HIGH
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
NONE
Base Severity
4.1
Share on: