Path Traversal Vulnerability in Dell DM5500 Product
CVE-2023-44306

6.5MEDIUM

Key Information:

Vendor

Dell
Status
Dell Powerprotect Data Manager Dm5500 Appliance
Vendor
CVE Published:
4 December 2023

What is CVE-2023-44306?

The Dell DM5500 product has a path traversal vulnerability within its PPOE component, which could allow a remote attacker with elevated privileges to exploit this flaw. By leveraging this vulnerability, an attacker can potentially overwrite files on the server's filesystem, posing significant risk to the integrity of the data stored on the device.

Affected Version(s)

Dell PowerProtect Data Manager DM5500 Appliance DM5500 5.14 and below

References

https://www.dell.com/support/kbdoc/en-us/000220107/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-44306 : Path Traversal Vulnerability in Dell DM5500 Product