CVE-2024-49600

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security_alert@emc.com

Published

2024-12-09

Last modified

2024-12-10

Weaknesses

CWE-284

Affected products

• Dell Power Manager Dpm (Dell)
• Power Manager (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000244438/dsa-2024-439