PoC Index

CVE-2018-11072

HIGH 7.8EPSS 0.4%

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges.

CVSS v3.0
7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.41% chance of exploitation in the next 30 days, 34th percentile
Published
2018-10-02
Updated
2024-09-16

Proof-of-concept exploits (1)

References

Related