CVE-2024-37129CWE-22

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability

Medium · published July 31, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-07-31T08:47Z
EPSS history
Timeline
  • 31 JUL 08:47Z
    Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability
    cvelistv5