CVE-2024-0155

2024-03-0413:15:44

CWE-416

dell

web.nvd.nist.gov

dell

digital delivery

vulnerability

use after free

exploit

nvd

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or execution of arbitrary code.

Affected configurations

Vulners

Vulnrichment

Node

delldell_digital_delivery_\(d3\)Range≤5.2.0.0

VendorProductVersionCPE
delldell_digital_delivery_\(d3\)*cpe:2.3:a:dell:dell_digital_delivery_\(d3\):*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	dell_digital_delivery_\(d3\)	*	cpe:2.3:a:dell:dell_digital_delivery_\(d3\)::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Digital Delivery (D3)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "5.2.0.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]