Low Privilege Attack Could Lead to Code Execution and Elevated Privileges in Dell Power Manager
CVE-2024-39576

8.8HIGH

Key Information:

Vendor
Dell
Vendor
CVE Published:
22 August 2024

Summary

Dell Power Manager (DPM) versions 3.15.0 and earlier contain an Incorrect Privilege Assignment vulnerability. This issue enables local attackers with low privileges to exploit the system. Successful exploitation may allow an attacker to execute arbitrary code and elevate their privileges within the affected product environment. Users and administrators are encouraged to review relevant security advisories and implement necessary updates to mitigate potential risks.

Affected Version(s)

Dell Power Manager (DPM) < 3.16.0

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank Lefteris Panos from LRQA Nettitude for reporting this issue
.