CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - security_alert@emc.com

Published

2018-10-02

Last modified

2024-09-16

Weaknesses

CWE-427

Affected products

• Digital Delivery (Dell)
• Dell Digital Delivery (Dell Emc)

References

• https://www.dell.com/support/article/us/en/04/sln313559/dell-digital-delivery-dll-injection-vulnerability?lang=en