Lucene search

K
nvd[email protected]NVD:CVE-2024-29176
HistoryJun 26, 2024 - 3:15 a.m.

CVE-2024-29176

2024-06-2603:15:10
CWE-119
CWE-788
web.nvd.nist.gov
5
dell powerprotect
buffer overflow
remote attacker
arbitrary code
application crash

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

51.1%

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a buffer overflow vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to an application crash or execution of arbitrary code on the vulnerable application’s underlying operating system with privileges of the vulnerable application.

Affected configurations

Nvd
Node
delldata_domain_operating_systemRange<7.7.5.40
OR
delldata_domain_operating_systemRange7.8.0.07.10.1.30
OR
delldata_domain_operating_systemRange7.11.0.07.13.1.0
VendorProductVersionCPE
delldata_domain_operating_system*cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

51.1%

Related for NVD:CVE-2024-29176