Dell Digital Delivery Vulnerable to Buffer Overflow
CVE-2024-0156
7.8HIGH
Summary
A buffer overflow vulnerability has been identified in Dell Digital Delivery, which affects versions prior to 5.2.0.0. This vulnerability may allow a local, low-privileged attacker to exploit the issue, resulting in arbitrary code execution and potential privilege escalation. The presence of this vulnerability underscores the importance of applying security updates to mitigate risks associated with unauthorized access and system control.
Affected Version(s)
Dell Digital Delivery (D3) < 5.2.0.0
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dell Technologies would like to thank Yue Liu From TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.