CVE-2024-49600

CVE-2024-49600 affects Dell Power Manager (DPM) prior to 3.17. The vulnerability is an improper access control allowing a low-privileged, locally authenticated attacker to achieve code execution and privilege escalation. Remediation: upgrade to Dell Power Manager version 3.17 or later (per PT-202...

CVE-2024-39576

Dell Power Manager (DPM) versions ≤3.15.0 suffer from an Incorrect Privilege Assignment vulnerability due to insecure DCOM deserialization, enabling a low-privileged, locally authenticated attacker to achieve code execution and elevation to SYSTEM. Affected component: DPM; root cause: insecure pr...

CVE-2023-28051

Dell Power Manager is affected by CVE-2023-28051 in versions 3.10 and earlier, due to an Improper Access Control vulnerability that could let a low-privilege attacker elevate privileges locally. The NVD/CV sources list a base CVSS v3.1 score of 7.8 (High) with impact to confidentiality, integrity...

CVE-2023-25543

Summary: CVE-2023-25543 affects Dell Power Manager. Dell Power Manager versions prior to 3.14 contain an Improper Authorization vulnerability in the DPM service that could allow a low-privileged user to elevate privileges (local access). Proven by multiple sources in the connected documents that ...

CVE-2023-32450

CVE-2023-32450 affects Dell Power Manager versions 3.3–3.14. The issue is an Improper Access Control that could allow a low-privilege, local attacker to execute arbitrary code with limited access. Remediation is provided in Dell security advisory DSA-2023-181 (security update). Other sources reit...