7.2
High
CVE-2023-44291 Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance
Description
Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell PowerProtect Data Manager DM5500 Appliance | Versions not published |
Other CVEs of Dell PowerProtect Data Manager DM5500 Appliance
The 7 CVEs of Dell PowerProtect Data Manager DM5500 Appliance →
CVE-2023-44302
Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability
8.1
High
CVE-2023-44301
Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability
5.4
Medium
CVE-2023-44300
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance
5.5
Medium
CVE-2023-44306
Dell DM5500 contains a path traversal vulnerability in the appliance
6.5
Medium