Dell UPS Multi-UPS Management Console Unquoted Search Path Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability allowing arbitrary code execution with SYSTEM privileges has been identified in Dell UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03). This issue arises from an unquoted search path vulnerability, which allows users with write access to a directory on the system drive to execute malicious code.
Impact
Exploitation of this vulnerability allows for arbitrary code execution with SYSTEM privileges.
Remediation
Users are advised to stop using Dell UPS Multi-UPS Management Console, as the product is no longer supported. The latest version of the software can be downloaded from the Dell Support website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.