Dell PowerProtect DM5500 v5.15.0.0 vulnerable to insecure deserialization
CVE-2024-22460
2.2LOW
Key Information
- Vendor
- Dell
- Status
- Data Manager Appliance Software (dmas)
- Vendor
- CVE Published:
- 8 May 2024
Summary
Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.
Affected Version(s)
Data Manager Appliance Software (DMAS) <= 5.15
CVSS V3.1
Score:
2.2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database