The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliance, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the improper handling of file access links. This allows attackers to execute arbitrary code.

🗓️ 10 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

PowerFlex appliances have improper file access handling enabling remote code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-37143	10 Dec 202402:48	–	circl
CNNVD	Dell PowerFlex 后置链接漏洞	10 Dec 202400:00	–	cnnvd
CVE	CVE-2024-37143	10 Dec 202402:25	–	cve
Cvelist	CVE-2024-37143	10 Dec 202402:25	–	cvelist
EUVD	EUVD-2024-36978	3 Oct 202520:07	–	euvd
NVD	CVE-2024-37143	10 Dec 202403:15	–	nvd
OSV	CVE-2024-37143	10 Dec 202403:15	–	osv
Positive Technologies	PT-2024-9245	6 Mar 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-37143	10 Dec 202402:25	–	vulnrichment

Vulners

Node

dell_technologies data_lakehouseRange<1.2.0.0

OR

dell_technologies insightiqRange<5.1.1

OR

dell_technologies powerflex_applianceRange<46.381.00

OR

dell_technologies powerflex_applianceRange<46.376.00

OR

dell_technologies powerflex_rackRange<3.8.1.0

OR

dell_technologies powerflex_rackRange<3.7.6.0

OR

dell_technologies powerflex_custom_nodeRange<4.6.1.0

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000258342/dsa-2024-405-security-update-for-dell-products-for-multiple-vulnerabilities
web	www.web.nvd.nist.gov/view/vuln/detail

11 Dec 2024 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 210

CVSS 310

EPSS0.00767

remote code execution file access links powerflex appliances data lakehouse insightiq