CVE-2023-44306

Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:dm5500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:dm5500:-:*:*:*:*:*:*:*

History

18 Dec 2023, 06:15

Type Values Removed Values Added
Summary (en) Dell DM5500 contains a path traversal vulnerability in PPOE Component. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite the files stored on the server filesystem. (en) Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem.

07 Dec 2023, 19:44

Type Values Removed Values Added
First Time Dell dm5500 Firmware
Dell
Dell dm5500
CPE cpe:2.3:h:dell:dm5500:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:dm5500_firmware:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
References () https://www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities - Vendor Advisory
CWE CWE-22

04 Dec 2023, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-04 09:15

Updated : 2023-12-18 06:15


NVD link : CVE-2023-44306

Mitre link : CVE-2023-44306

CVE.ORG link : CVE-2023-44306


JSON object : View

Products Affected

dell

  • dm5500
  • dm5500_firmware
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')