CVE-2024-48008

Published: Dic 13, 2024 Last Modified: Feb 04, 2025 EU-VD ID: EUVD-2024-43212
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low

Description

AI Translation Available

Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0021
Percentile
0,4th
Updated

EPSS Score Trend (Last 90 Days)

11

ASP.NET Misconfiguration: Creating Debug Binary

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
Languages: ASP.NET
View CWE Details
78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Non-Repudiation
Potential Impacts:
Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Read Files Or Directories Modify Files Or Directories Read Application Data Modify Application Data Hide Activities
Applicable Platforms
Technologies: AI/ML, Not Technology-Specific, Web Server
Likelihood of Exploit: High
View CWE Details
Application

Recoverpoint For Virtual Machines by Dell

Product Information
Vendor Dell
Product Recoverpoint For Virtual Machines
Version 6.0
cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Recoverpoint For Virtual Machines by Dell

Product Information
Vendor Dell
Product Recoverpoint For Virtual Machines
Version 6.0
cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024…
Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update…