CVE-2024-25946CWE-78

Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability

High · published March 28, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opportunity.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01437 · 72.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-03-28T19:00Z
EPSS history
Timeline
  • 28 MAR 19:00Z
    Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability
    cvelistv5