CVE-2024-22445CWE-78

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability

High · published February 13, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01439 · 73.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-02-13T07:40Z
EPSS history
Timeline
  • 13 FEB 07:40Z
    Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability
    cvelistv5