CVE-2023-48664 - Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability

Back Back to CVE browser

HIGH

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability

Published Dec 14, 2023

7.2

HIGH

CVSS 3.1

EPSS 1.73%

Description

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the execution of arbitrary OS commands on the affected system.

Affected products

Vendor Dell Product vApp Manager Default
unaffected
- Version
  Versions prior to 9.2.4.x
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

vApp Manager

unaffected

Version	Status	Constraints
Versions prior to 9.2.4.x	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52708		Advisory
https://www.dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities		vendor-advisoryPatchVendor Advisory