CVE-2024-42427

CVE-2024-42427 affects Dell ThinOS 2402 and 2405. It is an Improper Neutralization of Special Elements in a Command (Command Injection) vulnerability that could allow an unauthenticated attacker with physical access to gain elevation of privileges. The connected sources confirm the issue and its ...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

Dell InsightIQ 加密问题漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from a cryptographic issue vulnerability that arises from the use of corrupt or risky encryption algorithms. An unauthenticated remote access attacker could exploit the vulnerability to cause...

PT-2024-28541 · Dell · Dell Powerscale Insightiq

Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ versions 5.0 through 5.1 Description: The issue is related to the use of a broken or risky cryptographic algorithm. An unauthenticated attacker with remote access could potentially exploit this, leading to elevation ...

Dell InsightIQ 安全漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an authorization issue vulnerability that stems from improper privilege management. A highly privileged attacker with local access rights could exploit this vulnerability to cause a denial of...

PT-2024-29941 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions 2402 and 2405 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. An unauthenticated attacker with physical access coul...

PT-2024-29938 · Dell +1 · Dell Thinos +1

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 Description: The issue is related to an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potential...

Dell Precision Rack BIOS 安全漏洞

Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. An information disclosure vulnerability exists in the Dell Precision Rack BIOS that originates from accessing a memory location after the end of a buffer. A low-privileged attacker with local acces...

PT-2024-28540 · Dell · Dell Powerscale Insightiq

Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ version 5.0 Description: The issue is related to the use of hard-coded credentials in Dell PowerScale InsightIQ. A high-privileged attacker with local access could potentially exploit this, leading to information...

Dell InsightIQ 信任管理问题漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from a trust management issue vulnerability that stems from the use of hard-coded credentials. Exploitation of this vulnerability by a highly privileged attacker with local access could lead to...

Dell InsightIQ 安全漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. A security vulnerability exists in Dell InsightIQ that originates from a file or directory that is accessible to an outside party. An unauthenticated, remote-access attacker could use this vulnerability to read, modify,...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS that originates from a misauthorization when enabling Citrix CEB for WebLogin. A local, unauthenticated, low-privileged user could use this vulnerability to bypass existing controls and perform...

PT-2024-28539

Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue allows an unauthenticated attacker with remote access to potentially read, modify, and delete arbitrary files. This is due to a File or Directories Accessible to External...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS that originates from the inclusion of a command injection. Exploitation of this vulnerability by an unauthenticated attacker with physical access could result in elevated privileges...

Dell InsightIQ 访问控制错误漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an Access Control Error vulnerability that stems from incorrect access control. A highly privileged attacker with local access rights could exploit the vulnerability to cause an elevation of...

PT-2024-29940 · Dell · Dell Precision Rack

Name of the Vulnerable Software and Affected Versions: Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2 Description: The issue is related to an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this...

Dell SmartFabric OS10 Command Execution Vulnerability

Dell SmartFabric OS10 is an operating system from Dell for its switch products. A command execution vulnerability exists in Dell SmartFabric OS10. The vulnerability is due to an unsatisfactory neutralization "command injection" vulnerability in the affected version that contains special elements...

Dell SmartFabric OS10 Cross-Site Request Forgery Vulnerability

Dell SmartFabric OS10 is the operating system that runs on Dell EMC network devices and provides a range of networking functions and features. A cross-site request forgery vulnerability exists in Dell SmartFabric OS10, which can be exploited by a remote attacker to submit a specially crafted...

CVE-2024-38486

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to...