{ "id": "CVE-2024-22460", "sourceIdentifier": "security_alert@emc.com", "published": "2024-05-08T16:15:07.970", "lastModified": "2024-05-08T17:05:24.083", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application." }, { "lang": "es", "value": "Dell PowerProtect DM5500 versi\u00f3n 5.15.0.0 y anteriores contiene una vulnerabilidad de deserializaci\u00f3n insegura. Un atacante remoto con altos privilegios podr\u00eda explotar esta vulnerabilidad, lo que llevar\u00eda a la ejecuci\u00f3n de c\u00f3digo arbitrario en la aplicaci\u00f3n vulnerable." } ], "metrics": { "cvssMetricV31": [ { "source": "security_alert@emc.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW" }, "exploitabilityScore": 0.7, "impactScore": 1.4 } ] }, "weaknesses": [ { "source": "security_alert@emc.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-502" } ] } ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000224843/dsa-2024-083-security-update-for-dell-powerprotect-data-manager-appliance-for-multiple-vulnerabilities", "source": "security_alert@emc.com" } ] }