Risky Cryptographic Algorithm Vulnerability in Dell PowerScale InsightIQ
CVE-2024-39583

9.8CRITICAL

Key Information:

Vendor

Dell
Status
Powerscale Insightiq
Vendor
CVE Published:
10 September 2024

What is CVE-2024-39583?

The vulnerability in Dell PowerScale InsightIQ affects versions 5.0 and 5.1 and relates to the use of a broken or risky cryptographic algorithm. This flaw allows an unauthenticated attacker with remote access to the system to exploit the vulnerability, potentially leading to an elevation of privileges and compromising system integrity. It is critical for users of impacted versions to apply necessary security updates and mitigate associated risks.

Affected Version(s)

PowerScale InsightIQ 5.0 <= 5.1

References

https://www.dell.com/support/kbdoc/en-us/000228412/dsa-20...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.