Lucene search

K

Dell PowerProtect Data Manager DM5500 Appliance Security Vulnerabilities

cve
cve

CVE-2023-44306

Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server...

6.5CVSS

6.3AI Score

0.001EPSS

2023-12-04 09:15 AM
16
cve
cve

CVE-2023-44302

Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access of resources or functionality that could possibly lead to execute arbitrary...

9.8CVSS

8.8AI Score

0.002EPSS

2023-12-04 09:15 AM
15
cve
cve

CVE-2023-44304

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the...

8.8CVSS

8.8AI Score

0.002EPSS

2023-12-04 09:15 AM
12
cve
cve

CVE-2023-44301

Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable.....

5.4CVSS

5.5AI Score

0.0005EPSS

2023-12-04 09:15 AM
11
cve
cve

CVE-2023-44305

Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input...

9.8CVSS

9.6AI Score

0.002EPSS

2023-12-04 09:15 AM
12
cve
cve

CVE-2023-44300

Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this vulnerability, leading to the disclosure of certain service credentials. The attacker may be able to use the exposed credentials to access the....

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 09:15 AM
10
cve
cve

CVE-2023-44291

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application....

7.2CVSS

7.3AI Score

0.001EPSS

2023-12-04 09:15 AM
11