CVE-2024-37143

Published Dec 10, 2024

Last updated 3 months ago

Overview

Description
Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior to 5.1.1, and Dell Data Lakehouse versions prior to 1.2.0.0 contain an Improper Link Resolution Before File Access vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to execute arbitrary code on the system.
Source
security_alert@emc.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
10
Impact score
6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

security_alert@emc.com
CWE-59

Social media

Hype score
Not currently trending
  1. Dell PowerFlex/InsightIQ  などの脆弱性 CVE-2024-37143/37144 が FIX:CVSS 値は 10.0 https://t.co/erhuE4RKam Dell のエンタープライズ製品に存在する脆弱性が FIXED しました。CVE-2024-37143 は、CVSS 値が 10.0 と評価されています。ご利用のチームは、ご注意ください。 #Dell… https://t.co/hkukseI76r

    @iototsecnews

    23 Dec 2024

    83 Impressions

    1 Retweet

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. Dell fixes CVE-2024-37143 and CVE-2024-38144 vulnerabilities #Dell #CVE-2024-37143 #CVE-2024-38144 https://t.co/mLnHumaynr

    @pravin_karthik

    16 Dec 2024

    14 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. ⚠️ Dell has issued a critical update for vulnerabilities CVE-2024-37143 and CVE-2024-37144, enabling remote code execution on enterprise products. Users should upgrade ASAP! 🔒 #DellSecurityUpdate #RemoteCodeExecution #PowerFlexVulnerabilities #Cybersecu… https://t.co/G7itXjIEcG

    @TweetThreatNews

    14 Dec 2024

    20 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  4. Threat Alert: Dell Warns of Critical Flaws in Enterprise Products, Including CVE-2024-37143 (C CVE-2024-37143 CVE-2024-37144 Severity: ⚠️ Critical Maturity: 💢 Emerging Learn more: https://t.co/gApU0C04ll #CyberSecurity #ThreatIntel #InfoSec

    @fletch_ai

    14 Dec 2024

    10 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. Dell Warns of Critical Flaws in Enterprise Products, Including CVE-2024-37143 (CVSS 10) https://t.co/QkWvikKYGk

    @Dinosn

    13 Dec 2024

    1582 Impressions

    1 Retweet

    4 Likes

    3 Bookmarks

    0 Replies

    0 Quotes

  6. A new vulnerability with increased severity was disclosed for Dell PowerFlex Appliance and other products (CVE-2024-37143) https://t.co/iIHjqWRpnn

    @vuldb

    10 Dec 2024

    6 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  7. [CVE-2024-37143: CRITICAL] Dell PowerFlex, InsightIQ, and Data Lakehouse versions prior to specific releases have a critical vulnerability. Unauthenticated attackers can exploit it remotely to run code.#cybersecurity,#vulnerability https://t.co/19WofP9iD1 https://t.co/nMo2acw6kx

    @CveFindCom

    10 Dec 2024

    53 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes