CVE-2024-51532

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-51532
Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*
OR cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*
History

29 Jan 2025, 21:06

Type Values Removed Values Added
First Time Dell powerstore 3200q
Dell powerstore 9200t
Dell powerstore 9000t
Dell powerstoreos
Dell powerstore 3200t
Dell
Dell powerstore 500t
Dell powerstore 5200t
Dell powerstore 3000t
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 5000t
Dell powerstore 7000t
Summary
  • (es) Dell PowerStore contiene una vulnerabilidad de neutralización incorrecta de delimitadores de argumentos en un comando ('inyección de argumentos'). Un atacante con poco nivel de privilegios y acceso local podría aprovechar esta vulnerabilidad, lo que provocaría la modificación de archivos arbitrarios del sistema.
CPE cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*
References () https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities - Vendor Advisory

19 Dec 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-19 02:15

Updated : 2025-01-29 21:06

NVD link : CVE-2024-51532

Mitre link : CVE-2024-51532

CVE.ORG link : CVE-2024-51532

JSON object : View

Products Affected

dell

  • powerstore_1000t
  • powerstore_5000t
  • powerstoreos
  • powerstore_3200q
  • powerstore_500t
  • powerstore_7000t
  • powerstore_3200t
  • powerstore_1200t
  • powerstore_9000t
  • powerstore_9200t
  • powerstore_5200t
  • powerstore_3000t
CWE
CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')