CVE-2023-32477: 
Dell EMC Common Event Enabler vulnerability analysis and mitigation

Dell Common Event Enabler (CEE) 8.9.8.2 for Windows and prior versions contain an improper access control vulnerability identified as CVE-2023-32477. The vulnerability was disclosed on September 29, 2023. This security flaw affects the Windows version of Dell EMC Common Event Enabler software and could potentially be exploited by local low-privileged users (Dell Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High), with the following vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction. The impact affects confidentiality, integrity, and availability, all with high severity (Dell Advisory, NVD).

If successfully exploited, this vulnerability allows a local low-privileged malicious user to gain elevated privileges on the affected system. The high CVSS score indicates significant potential impact on system security, affecting confidentiality, integrity, and availability of the system (Dell Advisory).

The vulnerability requires local access and low privileges for exploitation. No user interaction is needed for a successful exploit, making it relatively straightforward for an attacker with local access to leverage this vulnerability (Dell Advisory).

Dell has released version CEE 8.9.9.0 to address this vulnerability. As a workaround, Dell recommends installing CEE for Windows in the default location (Program Files folder) and not in a custom folder. Users should upgrade to the remediated version CEE 8.9.9.0 as soon as possible (Dell Advisory).