CVE-2024-22460CWE-502

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability

Low · published May 8, 2024

CVSS v3.1
2.2
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-05-08T15:52Z
EPSS history
Timeline
  • 08 MAY 15:52Z
    Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability
    cvelistv5