CVE-2024-24908

Medium

Description

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem.

SeverityMedium

CVSS6.5

Exploit probability—

ProductDell Dm5500 Firmware

PublishedMay 8, 2024

First seenMay 8, 2024

Weakness typeCWE-22Path traversal

How to fix

Update

dell dm5500_firmware5.16.0.0 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000224843/dsa-2024-083-security-update-for-dell-powerprotect-data-manager-appliance-for-multiple-vulnerabilities

Affected products

Product	Affected versions	Fixed in
dell dm5500_firmware	v < 5.16.0.0	5.16.0.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.