Filtered by vendor Dell Subscriptions
Filtered by product Dm5500 Firmware Subscriptions

Search

Switch to Advanced Search (Beta)
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-24908 1 Dell 2 Dm5500, Dm5500 Firmware 2025-02-04 6.5 Medium
Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem.
CVE-2024-22460 1 Dell 2 Dm5500, Dm5500 Firmware 2025-02-04 2.2 Low
Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.
CVE-2024-37135 1 Dell 2 Dm5500, Dm5500 Firmware 2024-11-22 3.3 Low
DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
CVE-2023-44304 1 Dell 2 Dm5500, Dm5500 Firmware 2024-11-21 8.8 High
Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance.
CVE-2023-44306 1 Dell 2 Dm5500, Dm5500 Firmware 2024-11-21 6.5 Medium
Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem.
CVE-2023-44305 1 Dell 2 Dm5500, Dm5500 Firmware 2024-11-21 8.1 High
Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.