7.2
High
CVE-2024-25955 Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability
Description
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opportunity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Virtual Appliance (vApp) Manager 5978 | earliest → < 5978 | 5978 |
| Virtual Appliance (vApp) Manager 9.2 | earliest → < 9.2.4.9 | 9.2.4.9 |
| unisphere_for_powermax_virtual_appliance 9.2 | earliest → < 9.2.4.9 | 9.2.4.9 |
| solutions_enabler_virtual_appliance 9.2 | earliest → < 9.2.4.6 | 9.2.4.6 |
| unisphere_for_powermax 5978 | earliest → < 5978 | 5978 |