7.2
Élevée
CVE-2023-44291 Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance
Description
Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell PowerProtect Data Manager DM5500 Appliance | Versions non publiées |
Autres CVE de Dell PowerProtect Data Manager DM5500 Appliance
Les 7 CVE de Dell PowerProtect Data Manager DM5500 Appliance →
CVE-2023-44302
Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability
8.1
Élevée
CVE-2023-44301
Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability
5.4
Moyenne
CVE-2023-44300
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance
5.5
Moyenne
CVE-2023-44306
Dell DM5500 contains a path traversal vulnerability in the appliance
6.5
Moyenne