Browse CVEs

MEDIUM 6.5 CVE-2024-28978 Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged remote attacker could potenti… Openmanage Enterprise Mitigation only Fix from $1,6002024-05-01 HIGH 7.8 CVE-2024-28961 Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious use… Openmanage Enterprise Mitigation only Fix from $1,9502024-04-29 MEDIUM 5.5 CVE-2024-28963 Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local acces… Telemetry Dashboard Mitigation only Fix from $1,6002024-04-24 MEDIUM 6.5 CVE-2024-25962 Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulne… Insightiq Mitigation only Fix from $1,6002024-03-27 CRITICAL 9.8 CVE-2024-22426 Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potent… Recoverpoint For Virtual Machines Mitigation only Fix from $2,3002024-02-16 CRITICAL 9.8 CVE-2024-22425 Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker coul… Recoverpoint For Virtual Machines Mitigation only Fix from $2,3002024-02-16 MEDIUM 5.3 CVE-2023-39249 Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin us… Supportassist For Home Pcs Mitigation only Fix from $1,6002024-02-14 HIGH 7.8 CVE-2023-48670 Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileg… Supportassist For Home Pcs Mitigation only Fix from $1,9502023-12-22 MEDIUM 6.8 CVE-2023-44297 Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticat… Poweredge R660 Firmware Mitigation only Fix from $1,6002023-12-05 MEDIUM 6.8 CVE-2023-44298 Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticat… Poweredge R660 Firmware Mitigation only Fix from $1,6002023-12-05 HIGH 7.5 CVE-2023-39248 Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switche… Networking Os10 Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-39253 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-admi… Os Recovery Tool Mitigation only Fix from $1,9502023-11-23 HIGH 7.8 CVE-2023-39259 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-admi… Os Recovery Tool Mitigation only Fix from $1,9502023-11-16 MEDIUM 5.5 CVE-2023-44296 Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, lea… E Lab Navigator Mitigation only Fix from $1,6002023-11-16 HIGH 7.5 CVE-2023-4129 Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could poten… Data Protection Central Mitigation only Fix from $1,9502023-09-27 MEDIUM 5.5 CVE-2023-32476 Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on the device can access hard code… Hybrid Client Mitigation only Fix from $1,6002023-07-20 MEDIUM 5.5 CVE-2023-32446 Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with l… Wyse Thinos Mitigation only Fix from $1,6002023-07-20 HIGH 7.8 CVE-2023-28066 Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator us… Os Recovery Tool Mitigation only Fix from $1,9502023-06-01 MEDIUM 6.5 CVE-2023-28043 Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could poten… Secure Connect Gateway Mitigation only Fix from $1,6002023-06-01 HIGH 8.8 CVE-2023-28062 Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privilege… Powerprotect Data Manager Mitigation only Fix from $1,9502023-04-11 MEDIUM 5.9 CVE-2023-23695 Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could… Secure Connect Gateway Mitigation only Fix from $1,6002023-02-17 MEDIUM 6.7 CVE-2022-34450 PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit th… Powerpath Management Appliance Mitigation only Fix from $1,6002023-02-11 MEDIUM 6.0 CVE-2022-34449 PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenticated admin users can exploit … Powerpath Management Appliance Mitigation only Fix from $1,6002023-02-11 HIGH 8.8 CVE-2022-34448 PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability. An unauthenticated non-privi… Powerpath Management Appliance Mitigation only Fix from $1,9502023-02-11 HIGH 8.1 CVE-2022-34446 PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privil… Powerpath Management Appliance Mitigation only Fix from $1,9502023-02-11 HIGH 7.5 CVE-2022-34444 Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially explo… Powerscale Onefs Mitigation only Fix from $1,9502023-02-11 HIGH 7.2 CVE-2022-34447 PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An authenticated remote attacker wit… Powerpath Management Appliance Mitigation only Fix from $1,9502023-02-11 HIGH 8.8 CVE-2023-23691 Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exp… Powervault Me5012 Firmware Mitigation only Fix from $1,9502023-01-20 HIGH 7.5 CVE-2022-34425 Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploi… Enterprise Sonic Distribution Mitigation only Fix from $1,9502022-10-10 HIGH 7.1 CVE-2022-34429 Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability… Hybrid Client Mitigation only Fix from $1,9502022-09-30