Lucene search

K
cvelistDellCVELIST:CVE-2024-28974
HistoryMay 29, 2024 - 3:21 p.m.

CVE-2024-28974

2024-05-2915:21:22
CWE-326
dell
www.cve.org
5
dell data protection
encryption strength
vulnerability
remote access
denial of service

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Data Protection Advisor",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "19.9",
        "status": "affected",
        "version": "19.5",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PowerProtect DP Series Appliance (IDPA)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "2.7.6",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-28974