CVE-2024-53289

CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53290

Dell ThinOS 2408 is affected by a local, unauthenticated Command Injection due to improper neutralization of special elements. The CVE-2024-53290 entry documents allow command execution with high impact (C/H, I/H, A/H) and a local attack vector; no exploitation or patch details are confirmed in t...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-52537

CVE-2024-52537 affects Dell Client Platform Firmware Update Utility (Dell Client Platform). The vulnerability is described as an Improper Link Resolution issue in the updater, with a local attacker using high privileges to achieve Elevation of Privileges . Several connected sources corroborate: D...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...

The vulnerability of the GET method of the software management system in the One-to-one Dell OpenManage Server Administrator (OMSA) mode allows attackers to increase their privileges.

The vulnerability of the GET method of the software management interface in the One-to-one Dell OpenManage Server Administrator OMSA mode is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Dell VxVerify 安全漏洞

Dell VxVerify is a pre-upgrade operational status checking tool from Dell USA. A security vulnerability exists in Dell VxVerify versions prior to x.40.405, which stems from the storage of plaintext passwords in the shell wrapper, and could allow a local, high-privileged attacker to disclose...

Dell Client Platform 安全漏洞

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

PT-2024-35712 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

PT-2024-35714 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability. An unauthenticated attacker with local access could potentially...

Dell ThinOS 命令注入漏洞

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

PT-2024-35364 · Dell · Dell Client Platform Firmware Update Utility

Name of the Vulnerable Software and Affected Versions: Dell Client Platform Firmware Update Utility affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this...

Dell Urges Immediate Update to Fix Critical Power Manager Vulnerability

A critical security flaw in Dell Power Manager has been discovered that could allow attackers to compromise your systems and execute arbitrary code...

CVE-2024-52538

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...