CVE-2024-45759

Published Nov 8, 2024

Last updated 3 months ago

Overview

Description
Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of privilege vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to unauthorized execution of certain commands to overwrite system config of the application. Exploitation may lead to denial of service of system.
Source
security_alert@emc.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
7.3
Impact score
5.5
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Severity
HIGH

Weaknesses

security_alert@emc.com
CWE-266
nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Configurations