7.8
High
CVE-2024-28964 Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools
Description
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Common Event Enabler 8.9 | earliest → < 8.9.10.0 | 8.9.10.0 |
| common_event_enabler 8.9 | earliest → 8.9.10.0 | No fix stated |
Other CVEs of Common Event Enabler
The 4 CVEs of Common Event Enabler →
CVE-2025-29985
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default…
6.5
Medium
CVE-2025-29986
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to…
8.3
High
CVE-2023-32477
Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability
7.8
High