Lucene search

K
nvd[email protected]NVD:CVE-2024-28974
HistoryMay 29, 2024 - 4:15 p.m.

CVE-2024-28974

2024-05-2916:15:09
CWE-326
web.nvd.nist.gov
1
dell data protection
encryption strength
denial of service
vulnerability
remote access

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-28974