CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
32.1%
Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
Vendor | Product | Version | CPE |
---|---|---|---|
dell | powerprotect_data_manager_dm5500 | - | cpe:2.3:h:dell:powerprotect_data_manager_dm5500:-:*:*:*:*:*:*:* |
dell | powerprotect_data_manager_dm5500_firmware | * | cpe:2.3:o:dell:powerprotect_data_manager_dm5500_firmware:*:*:*:*:*:*:*:* |
[
{
"defaultStatus": "unaffected",
"product": "Dell PowerProtect Data Manager DM5500 Appliance",
"vendor": "Dell",
"versions": [
{
"status": "affected",
"version": "DM5500 5.14 and below"
}
]
}
]