CVE Vulnerabilities

CVE-2024-49558

Improper Privilege Management

Published: Nov 12, 2024 | Modified: Nov 15, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Smartfabric_os10 Dell 10.5.4.0 (including) 10.5.4.13 (excluding)
Smartfabric_os10 Dell 10.5.5.0 (including) 10.5.5.12 (excluding)
Smartfabric_os10 Dell 10.5.6.0 (including) 10.5.6.6 (excluding)

Potential Mitigations

References