PT-2024-10874 · Dell · Dell Bsafe Micro Edition Suite

Name of the Vulnerable Software and Affected Versions: Dell BSAFE Micro Edition Suite versions prior to 4.5.2 Description: The issue is related to an Observable Timing Discrepancy. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2024-22433

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.getldapinfo in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity,...

CVE-2024-22433

Dell Data Protection Search 19.2.0 and above exposes passwords in plain text via LdapSettings.get_ldap_info, enabling a remote unauthenticated attacker to potentially compromise confidentiality, integrity, and availability and take remote control of DP Search as described in CVE-2024-22433. Affec...

CVE-2024-22433

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.getldapinfo in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity,...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

Design/Logic Flaw

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

Authentication flaw

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x–9.6.0.x are affected by an incorrect default permissions vulnerability. The root cause is improper/default permissions settings that a local, low-privilege attacker could abuse to cause a denial of service. Documents across sources consistently identify the af...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x have a missing authentication for a critical function, allowing a low-privileged local attacker to gain elevated access. Public sources (NVD/CNVD/PRION/PT security) confirm an elevation of privilege risk but do not provide exploit details or ...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

PT-2024-19419 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.6.0.x Description: The issue is related to an incorrect default permissions vulnerability. A local low-privileges malicious user could potentially exploit this, leading to denial of service...

Dell iDRAC Service Module < 5.3.0.0 Privilege Escalation

The Dell iDRAC Service Module on Windows, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest...

Dell PowerScale OneFS Security Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x. The vulnerability stems from a Contains Incorrect Default Privileges...

PT-2024-19431 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x Description: The issue is related to a missing authentication for a critical function, which could be exploited by a low-privileged local malicious user to gain elevated access...

Dell NetWorker Information Disclosure Vulnerability

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. An information disclosure vulnerability exists in Dell NetWorker, which arises from the database storing plain text passwords in a temporary configuration file during backups, and can be exploited...