Lucene search
HistoryJul 31, 2024 - 9:15 a.m.
CVE-2024-37129
dell inventory collector
path traversal
vulnerability
arbitrary code execution
system security
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.9%
Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.
Affected configurations
Node
dellinventory_collectorRange<12.3.0.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | inventory_collector | * | cpe:2.3:a:dell:inventory_collector:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-37129
2024-07-31 08:47:57
cve
cve
CVE-2024-37129
2024-07-31 09:15:04
vulnrichment
vulnrichment
CVE-2024-37129
2024-07-31 08:47:57
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.9%
Related for NVD:CVE-2024-37129