CVE-2024-45759
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Nov 8, 2024
CWE ID 266
Summary
CVE-2024-45759 is a newly disclosed vulnerability affecting Dell PowerProtect Data Domain systems. Versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50 are reportedly susceptible. This issue grants local, low-privileged attackers the ability to escalate their privileges. Consequences of exploitation include unauthorized execution of specific commands, potentially leading to an overwrite of the application's system configuration. The vulnerability may result in a denial of service for the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.