DSA-2024-084: Security Update for Dell OpenManage Integration with Microsoft Windows Admin Center

Resumen: Dell OpenManage Integration with Microsoft Windows Admin Center remediation is available for a vulnerability in the gateway plugin that could be exploited by malicious users to compromise the affected system. ...

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Impacto

High

Detalles

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

CVEs Addressed Product  Affected Versions Remediated Versions Link
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center Prior to and including 3.1 3.2 Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) v3.2.0
CVEs Addressed Product  Affected Versions Remediated Versions Link
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center Prior to and including 3.1 3.2 Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) v3.2.0

Soluciones alternativas y mitigaciones

None

Historial de revisiones

Revision DateDescription
1.02024-14-02Initial Release

Información relacionada

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Descargo de responsabilidad

Productos afectados

OpenManage Integration with Microsoft Windows Admin Center, OpenManage Integration with Microsoft Windows Admin Center, Product Security Information
Propiedades del artículo
Número del artículo: 000222075
Tipo de artículo: Dell Security Advisory
Última modificación: 14 feb 2024
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.