DSA-2024-084: Security Update for Dell OpenManage Integration with Microsoft Windows Admin Center

Resumo: Dell OpenManage Integration with Microsoft Windows Admin Center remediation is available for a vulnerability in the gateway plugin that could be exploited by malicious users to compromise the affected system. ...

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.
Confira outros recursos

Impacto

High

Dados

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

CVEs Addressed Product  Affected Versions Remediated Versions Link
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center Prior to and including 3.1 3.2 Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) v3.2.0
CVEs Addressed Product  Affected Versions Remediated Versions Link
CVE-2024-24909 Dell OpenManage Integration with Microsoft Windows Admin Center Prior to and including 3.1 3.2 Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) v3.2.0

Soluções temporárias e atenuações

None

Histórico de revisão

Revision DateDescription
1.02024-14-02Initial Release

Informações relacionadas

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Aviso de isenção legal

Produtos afetados

OpenManage Integration with Microsoft Windows Admin Center, OpenManage Integration with Microsoft Windows Admin Center, Product Security Information
Propriedades do artigo
Número do artigo: 000222075
Tipo de artigo: Dell Security Advisory
Último modificado: 14 fev. 2024
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.