rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-47962 Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Delta Electronics
product: CNCSoft-G2
default_status: unaffected
Credits: lang: en
value: Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2024-10-10T17:14:30.805Z
CVE-2024-47963 Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Delta Electronics
product: CNCSoft-G2
default_status: unaffected
Credits: lang: en
value: Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2024-10-10T17:15:54.044Z
CVE-2024-47964 Heap-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: Delta Electronics
product: CNCSoft-G2
default_status: unaffected
Credits: lang: en
value: Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2024-10-10T17:16:51.747Z
CVE-2024-47965 Out-of-bounds Read vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Delta Electronics
product: CNCSoft-G2
default_status: unaffected
Credits: lang: en
value: Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2024-10-10T17:18:01.407Z
CVE-2024-47966 Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-457
description: CWE-457 Use of Uninitialized Variable
Affected products: vendor: Delta Electronics
product: CNCSoft-G2
default_status: unaffected
Credits: lang: en
value: Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2024-10-10T17:18:58.817Z
CVE-2024-47967 
Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Problem types: description: General Race Condition
Affected products: vendor: Solidigm
product: D7-P5510
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
vendor: Solidigm
product: D7-P5500
default_status: unaffected
vendor: Solidigm
product: D7-P5600
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-10-07T21:06:58.945Z
CVE-2024-47968 
Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Problem types: description: General Race Condition
Affected products: vendor: Solidigm
product: DC P4510
default_status: unaffected
vendor: Solidigm
product: DC P4610
default_status: unaffected
vendor: Solidigm
product: DC P4511
default_status: unaffected
vendor: Solidigm
product: D5-P4320
default_status: unaffected
vendor: Solidigm
product: D5-P4326
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-10-07T21:19:38.965Z
CVE-2024-47969 
Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Problem types: description: Improper Resource Management
Affected products: vendor: Solidigm
product: DC P4510
default_status: unaffected
vendor: Solidigm
product: P4511
default_status: unaffected
vendor: Solidigm
product: P4610
default_status: unaffected
vendor: Solidigm
product: D5-P4320
default_status: unaffected
vendor: Solidigm
product: P4326
default_status: unaffected
vendor: Solidigm
product: P4420
default_status: unaffected
vendor: Solidigm
product: P5510
default_status: unaffected
vendor: Solidigm
product: P5530
default_status: unaffected
vendor: Solidigm
product: P5316
default_status: unaffected
vendor: Solidigm
product: P5520
default_status: unaffected
vendor: Solidigm
product: P5620
default_status: unaffected
vendor: Solidigm
product: P5628
default_status: unaffected
vendor: Solidigm
product: P5500
default_status: unaffected
vendor: Solidigm
product: P5600
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-10-07T21:41:24.430Z
CVE-2024-47971 
Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.
Problem types: description: Improper Error Handling
Affected products: vendor: Solidigm
product: D5-P5316
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
version: 3.1
Published: 2024-10-07T19:21:29.566Z
CVE-2024-47972 
Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource.
Problem types: description: Improper Resource Management
Affected products: vendor: Solidigm
product: D7-P5510
default_status: unaffected
vendor: Solidigm
product: D5-P5316
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-10-07T19:26:17.949Z
CVE-2024-47973 
In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.
Problem types: description: Improper Resource Management
Affected products: vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
vendor: Solidigm
product: D3-S4510
default_status: unaffected
vendor: Solidigm
product: D3-S4610
default_status: unaffected
vendor: Solidigm
product: D3-S4520
default_status: unaffected
vendor: Solidigm
product: D3-S4620
default_status: unaffected
vendor: Solidigm
product: D5-P5316
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2024-10-07T20:41:47.290Z
CVE-2024-47974 
Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Problem types: description: General Race Condition
Affected products: vendor: Solidigm
product: D7-P5510
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
vendor: Solidigm
product: D7-P5500
default_status: unaffected
vendor: Solidigm
product: D7-P5600
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-10-07T20:50:30.075Z
CVE-2024-47975 
Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service.
Problem types: description: Improper Access Control Management
Affected products: vendor: Solidigm
product: D7-P5500
default_status: unaffected
vendor: Solidigm
product: D7-P5600
default_status: unaffected
vendor: Solidigm
product: D5-P5316
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
vendor: Solidigm
product: D7-P5628
default_status: unaffected
vendor: Solidigm
product: DC P4510
default_status: unaffected
vendor: Solidigm
product: DC P4511
default_status: unaffected
vendor: Solidigm
product: DC P4610
default_status: unaffected
vendor: Solidigm
product: D5-P4320
default_status: unaffected
vendor: Solidigm
product: D5-P4326
default_status: unaffected
vendor: Solidigm
product: DC P4511
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
version: 3.1
Published: 2024-10-07T18:57:27.239Z
CVE-2024-47976 
Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
Problem types: description: Improper Access Control Management
Affected products: vendor: Solidigm
product: DC P4510
default_status: unaffected
vendor: Solidigm
product: DC P4610
default_status: unaffected
vendor: Solidigm
product: D7-P5500
default_status: unaffected
vendor: Solidigm
product: D7-P5600
default_status: unaffected
vendor: Solidigm
product: D5-P5316
default_status: unaffected
vendor: Solidigm
product: D7-P5520
default_status: unaffected
vendor: Solidigm
product: D7-P5620
default_status: unaffected
vendor: Solidigm
product: DC P4511
default_status: unaffected
vendor: Solidigm
product: D5-P4320
default_status: unaffected
vendor: Solidigm
product: D5-P4326
default_status: unaffected
vendor: Solidigm
product: D7-P5510
default_status: unaffected
vendor: Solidigm
product: D7-P5628
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Published: 2024-10-07T19:15:13.415Z
CVE-2024-47977 
Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Dell
product: Avamar
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
version: 3.1
Credits: lang: en
value: Dell would like to thank Kentaro Kawane of GMO Cybersecurity by Ierae working with Trend Micro Zero Day Initiative for reporting this issue.
Published: 2024-12-10T10:26:54.861Z
CVE-2024-47978 
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Problem types: cwe_id: CWE-250
description: CWE-250: Execution with Unnecessary Privileges
Affected products: vendor: Dell
product: NativeEdge
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-12-25T14:57:00.389Z
CVE-2024-47984 
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state.
Problem types: cwe_id: CWE-790
description: CWE-790: Improper Filtering of Special Elements
Affected products: vendor: Dell
product: RecoverPoint for Virtual Machines
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-12-13T14:15:53.203Z
CVE-2024-48007 
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data.
Problem types: description: A07:2021 - Identification and Authentication Failures
Affected products: vendor: Dell
product: RecoverPoint for Virtual Machines
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-12-13T14:00:56.270Z
CVE-2024-48008 
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information
Problem types: cwe_id: CWE-11
description: CWE-11: ASP.NET Misconfiguration: Creating Debug Binary
Affected products: vendor: Dell
product: RecoverPoint for Virtual Machines
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2024-12-13T13:30:20.777Z
CVE-2024-48010 
Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to escalation of privilege on the application.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Dell
product: PowerProtect DD
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-11-08T03:01:01.903Z
CVE-2024-48011 
Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Dell
product: PowerProtect DD
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-11-08T02:30:27.068Z
CVE-2024-48013 
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Problem types: cwe_id: CWE-250
description: CWE-250: Execution with Unnecessary Privileges
Affected products: vendor: Dell
product: SmartFabric OS10 Software
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Dell would like to thank n3k from TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.
Published: 2025-03-17T16:45:55.160Z
CVE-2024-48014 
Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Dell
product: BSAFE Micro Edition Suite
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-09-25T15:08:52.140Z
CVE-2024-48015 
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Dell
product: SmartFabric OS10 Software
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Dell would like to thank n3k from TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.
Published: 2025-03-17T17:16:55.661Z
CVE-2024-48016 
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account.
Problem types: cwe_id: CWE-327
description: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Dell
product: Secure Connect Gateway (SCG) 5.0 Appliance - SRS
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2024-10-18T16:34:34.661Z
CVE-2024-48017 
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Problem types: cwe_id: CWE-77
description: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Dell
product: SmartFabric OS10 Software
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Dell would like to thank n3k from TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.
Published: 2025-03-17T17:23:43.160Z