Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47946 State: PUBLISHED Published: 2024-12-10T07:48:42.166Z Last Updated: 2025-11-03T22:21:57.517Z Vendors: Image Access GmbH Products: Scan2Net Problem Types: CWE-434 Description: If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code executes once the uploaded file is accessed. This allows the execution of arbitrary PHP code and OS commands on the device as "www-data". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
and OS commands on the device as "www-data". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/imageaccess - https://www.imageaccess.de/?page=SupportPortal&lang=en
CVE ID: CVE-2024-47947 State: PUBLISHED Published: 2024-12-12T12:38:49.985Z Last Updated: 2025-11-03T22:21:58.993Z Vendors: Image Access GmbH Products: Scan2Net Problem Types: CWE-79 Description: Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Additional A
ed Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/imageaccess - https://www.imageaccess.de/?page=SupportPortal&lang=en
CVE ID: CVE-2024-47948 State: PUBLISHED Published: 2024-10-08T15:48:14.612Z Last Updated: 2024-10-08T16:14:10.908Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47949 State: PUBLISHED Published: 2024-10-08T15:48:15.267Z Last Updated: 2024-10-08T16:13:37.972Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47950 State: PUBLISHED Published: 2024-10-08T15:48:16.097Z Last Updated: 2024-10-08T16:13:07.568Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47951 State: PUBLISHED Published: 2024-10-08T15:48:16.659Z Last Updated: 2024-10-08T16:12:39.615Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47962 State: PUBLISHED Published: 2024-10-10T17:14:30.805Z Last Updated: 2024-10-10T17:45:02.444Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-121 Description: Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21
CVE ID: CVE-2024-47963 State: PUBLISHED Published: 2024-10-10T17:15:54.044Z Last Updated: 2024-10-10T17:43:56.182Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-787 Description: Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21
CVE ID: CVE-2024-47964 State: PUBLISHED Published: 2024-10-10T17:16:51.747Z Last Updated: 2024-10-10T17:42:30.381Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-122 Description: Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21
CVE ID: CVE-2024-47965 State: PUBLISHED Published: 2024-10-10T17:18:01.407Z Last Updated: 2024-10-10T17:41:01.289Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-125 Description: Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21
CVE ID: CVE-2024-47966 State: PUBLISHED Published: 2024-10-10T17:18:58.817Z Last Updated: 2024-10-10T17:37:04.833Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-457 Description: Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21
CVE ID: CVE-2024-47967 State: PUBLISHED Published: 2024-10-07T21:06:58.945Z Last Updated: 2024-12-11T19:17:07.902Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Solidigm Products: D7-P5510, D7-P5520, D7-P5620, D7-P5500, D7-P5600 Problem Types: General Race Condition Description: Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47968 State: PUBLISHED Published: 2024-10-07T21:19:38.965Z Last Updated: 2024-12-11T19:11:54.542Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Solidigm Products: DC P4510, DC P4610, DC P4511, D5-P4320, D5-P4326 Problem Types: General Race Condition Description: Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47969 State: PUBLISHED Published: 2024-10-07T21:41:24.430Z Last Updated: 2025-01-09T17:31:50.208Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Solidigm Products: DC P4510, P4511, P4610, D5-P4320, P4326, P4420, P5510, P5530, P5316, P5520, P5620, P5628, P5500, P5600 Problem Types: Improper Resource Management Description: Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.htmlhttps://
CVE ID: CVE-2024-47971 State: PUBLISHED Published: 2024-10-07T19:21:29.566Z Last Updated: 2025-02-10T22:54:11.272Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Solidigm Products: D5-P5316, D7-P5520, D7-P5620 Problem Types: Improper Error Handling Description: Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.htmlhttps://
CVE ID: CVE-2024-47972 State: PUBLISHED Published: 2024-10-07T19:26:17.949Z Last Updated: 2024-12-11T19:15:18.708Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Solidigm Products: D7-P5510, D5-P5316, D7-P5520, D7-P5620 Problem Types: Improper Resource Management Description: Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47973 State: PUBLISHED Published: 2024-10-07T20:41:47.290Z Last Updated: 2024-12-11T19:16:03.476Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Solidigm Products: D7-P5520, D7-P5620, D3-S4510, D3-S4610, D3-S4520, D3-S4620, D5-P5316 Problem Types: Improper Resource Management Description: In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.htmlhttps://
CVE ID: CVE-2024-47974 State: PUBLISHED Published: 2024-10-07T20:50:30.075Z Last Updated: 2024-12-11T19:16:32.701Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Solidigm Products: D7-P5510, D7-P5520, D7-P5620, D7-P5500, D7-P5600 Problem Types: General Race Condition Description: Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47975 State: PUBLISHED Published: 2024-10-07T18:57:27.239Z Last Updated: 2025-08-27T21:26:52.445Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: Solidigm Products: D7-P5500, D7-P5600, D5-P5316, D7-P5520, D7-P5620, D7-P5628, DC P4510, DC P4511, DC P4610, D5-P4320, D5-P4326 Problem Types: Improper Access Control Management Description: Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/suppo
nable denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47976 State: PUBLISHED Published: 2024-10-07T19:15:13.415Z Last Updated: 2025-03-13T18:18:16.675Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Solidigm Products: DC P4510, DC P4610, D7-P5500, D7-P5600, D5-P5316, D7-P5520, D7-P5620, DC P4511, D5-P4320, D5-P4326, D7-P5510, D7-P5628 Problem Types: Improper Access Control Management Description: Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/support-page/support-security.html
CVE ID: CVE-2024-47977 State: PUBLISHED Published: 2024-12-10T10:26:54.861Z Last Updated: 2025-08-04T18:39:35.486Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Dell Products: Avamar Problem Types: CWE-89 Description: Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/00025
ecution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258636/dsa-2024-489-security-update-for-dell-avamar-and-dell-avamar-virtual-edition-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2024-47978 State: PUBLISHED Published: 2024-12-25T14:57:00.389Z Last Updated: 2024-12-26T18:09:14.075Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: NativeEdge Problem Types: CWE-250 Description: Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000258904/dsa-2024-488-security-update-for-dell-nativeedge-multiple-vulnerabilities
CVE ID: CVE-2024-47984 State: PUBLISHED Published: 2024-12-13T14:15:53.203Z Last Updated: 2024-12-13T20:38:32.169Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: RecoverPoint for Virtual Machines Problem Types: CWE-790 Description: Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell
n getting system back to stable state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-48007 State: PUBLISHED Published: 2024-12-13T14:00:56.270Z Last Updated: 2025-03-13T15:41:38.986Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: RecoverPoint for Virtual Machines Problem Types: A07:2021 - Identification and Authentication Failures Description: Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data. Additional Analyst Notes: - CISA ADP V
reusing them to access the system leading to gaining access to unauthorized data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-48008 State: PUBLISHED Published: 2024-12-13T13:30:20.777Z Last Updated: 2024-12-13T20:38:56.408Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: RecoverPoint for Virtual Machines Problem Types: CWE-11 Description: Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-48010 State: PUBLISHED Published: 2024-11-08T03:01:01.903Z Last Updated: 2024-11-08T15:56:27.836Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-284 Description: Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to escalation of privilege on the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-securi
erences: - https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability
CVE ID: CVE-2024-48011 State: PUBLISHED Published: 2024-11-08T02:30:27.068Z Last Updated: 2024-11-08T15:57:13.659Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-200 Description: Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-
nces: - https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability
CVE ID: CVE-2024-48013 State: PUBLISHED Published: 2025-03-17T16:45:55.160Z Last Updated: 2025-03-18T03:55:19.428Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-250 Description: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-de
A ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48014 State: PUBLISHED Published: 2025-09-25T15:08:52.140Z Last Updated: 2025-09-25T16:05:40.970Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: BSAFE Micro Edition Suite Problem Types: CWE-787 Description: Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000256131/dsa-2024-459-dell-bsafe-micro-edition-suite-security-update
CVE ID: CVE-2024-48015 State: PUBLISHED Published: 2025-03-17T17:16:55.661Z Last Updated: 2025-03-18T03:55:22.383Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-77 Description: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/0002
xecution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48016 State: PUBLISHED Published: 2024-10-18T16:34:34.661Z Last Updated: 2024-10-18T16:48:27.430Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-327 Description: Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account. Additional An
er may be able to use exposed credentials to access the system with privileges of the compromised account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-48017 State: PUBLISHED Published: 2025-03-17T17:23:43.160Z Last Updated: 2025-03-18T03:55:23.874Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-77 Description: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289
cution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities