CVE-2024-51532CWE-88

CVE-2024-51532

High · published December 19, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.9th percentile
Weakness
CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Published
2024-12-19T07:15Z
Affected products (1)
ProductVersionsFixed in
dell/powerstoreos< 4.0.1.04.0.1.0
References (1)
https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 19 DEC 01:40Z
    Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability
    cvelistv5