7.8
Élevée
CVE-2024-28964 Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools
Description
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Common Event Enabler 8.9 | premières → < 8.9.10.0 | 8.9.10.0 |
| common_event_enabler 8.9 | premières → 8.9.10.0 | Pas de correctif indiqué |
Autres CVE de Common Event Enabler
Les 4 CVE de Common Event Enabler →
CVE-2025-29985
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default…
6.5
Moyenne
CVE-2025-29986
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to…
8.3
Élevée
CVE-2023-32477
Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability
7.8
Élevée