8.8
High
CVE-2024-39576 Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability
Description
Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Power Manager (DPM) 3.16 | earliest → < 3.16.0 | 3.16.0 |
| power_manager 3.16 | earliest → < 3.16.0 | 3.16.0 |
Other CVEs of Dell Power Manager (DPM)
The 5 CVEs of Dell Power Manager (DPM) →
CVE-2024-49600
Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability
7.8
High
CVE-2023-25543
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service
7.8
High
CVE-2023-32450
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability
6.1
Medium
CVE-2023-28051
Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability
7.8
High