Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Dec 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. |
07 Dec 2023, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dell powerprotect Data Manager Dm5500 Firmware
Dell powerprotect Data Manager Dm5500 Dell |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| CWE | CWE-78 | |
| CPE | cpe:2.3:o:dell:powerprotect_data_manager_dm5500_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:powerprotect_data_manager_dm5500:-:*:*:*:*:*:*:* |
|
| References | () https://www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities - Vendor Advisory |
04 Dec 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-04 09:15
Updated : 2023-12-18 06:15
NVD link : CVE-2023-44291
Mitre link : CVE-2023-44291
CVE.ORG link : CVE-2023-44291
JSON object : View
Products Affected
dell
- powerprotect_data_manager_dm5500_firmware
- powerprotect_data_manager_dm5500
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')