Low Privilege Attack Could Lead to Code Execution and Elevated Privileges in Dell Power Manager
CVE-2024-39576
8.8HIGH
Summary
Dell Power Manager (DPM) versions 3.15.0 and earlier contain an Incorrect Privilege Assignment vulnerability. This issue enables local attackers with low privileges to exploit the system. Successful exploitation may allow an attacker to execute arbitrary code and elevate their privileges within the affected product environment. Users and administrators are encouraged to review relevant security advisories and implement necessary updates to mitigate potential risks.
Affected Version(s)
Dell Power Manager (DPM) < 3.16.0
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dell would like to thank Lefteris Panos from LRQA Nettitude for reporting this issue