Approved changes feed: RSS · Atom

cpe:2.3:a:dell:dell_os_recovery_tool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductDell Os Recovery Tool (384ce6c7-325f-5b23-a0d7-22d000dc30f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39259 vulnerable 2026-06-08 06:09:36.172335 Details available
HIGH (7.3)
Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system.
Published: 2023-11-16T09:02:01.739Z
Updated: 2024-08-12T14:12:53.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39253 vulnerable 2026-06-08 06:09:36.163494 Details available
HIGH (7.3)
Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system.
Published: 2023-11-23T06:20:07.294Z
Updated: 2024-08-02T18:02:06.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28066 vulnerable 2026-06-08 06:01:09.345629 Details available
HIGH (7.3)
Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system.
Published: 2023-06-01T15:40:50.096Z
Updated: 2025-01-08T21:47:08.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26865 vulnerable 2026-06-08 05:41:54.364326 Details available
MEDIUM (6.8)
Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.
Published: 2022-05-26T15:20:24.958Z
Updated: 2024-09-16T23:16:58.684Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.