Lucene search

K

Dm5500 Firmware Security Vulnerabilities - January

cve
cve

CVE-2023-44304

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance.

8.8CVSS

8.9AI Score

0.002EPSS

2023-12-04 09:15 AM
15
cve
cve

CVE-2023-44305

Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.

9.8CVSS

9.7AI Score

0.002EPSS

2023-12-04 09:15 AM
17
cve
cve

CVE-2023-44306

Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem.

6.5CVSS

6.3AI Score

0.001EPSS

2023-12-04 09:15 AM
22
cve
cve

CVE-2024-24908

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem.

6.5CVSS

6.8AI Score

0.0004EPSS

2024-05-08 04:15 PM
36