CVE-2024-49600 - Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability

Back Back to CVE browser

HIGH

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability

Published Dec 9, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.18%

Description

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges.

Affected products

Vendor Dell Product Dell Power Manager (DPM) Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <3.17

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Dell Power Manager (DPM)

unaffected

Version	Status	Constraints
-	affected	<3.17

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

https://www.dell.com/support/kbdoc/en-us/000244438/dsa-2024-439
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/en-us/000244438/dsa-2024-439		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Dec 9, 2024

Updated Dec 10, 2024

Reserved Oct 17, 2024

Link CVE-2024-49600

CISA Vulnrichment

Updated Dec 9, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-49600

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-49600