Dell PowerProtect DM5500 v5.15.0.0 vulnerable to insecure deserialization
CVE-2024-22460

7.2HIGH

Key Information:

Vendor

Dell
Status
Data Manager Appliance Software (dmas)
Vendor
CVE Published:
8 May 2024

What is CVE-2024-22460?

The Dell PowerProtect DM5500, specifically in versions 5.15.0.0 and earlier, is susceptible to an insecure deserialization vulnerability. This issue enables remote attackers with sufficient privileges to exploit the vulnerability, potentially leading to arbitrary code execution within the vulnerable application. It is crucial for users and administrators to apply the necessary security updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Data Manager Appliance Software (DMAS) <= 5.15

References

https://www.dell.com/support/kbdoc/en-us/000224843/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.