CVE-2024-53295

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 1, 2025
Updated: Feb 7, 2025
CWE ID 1220

Summary

CVE-2024-53295 is a newly identified vulnerability affecting Dell PowerProtect DD versions before 8.3.0.0, 7.10.1.50, and 7.13.1.20. This issue involves an improper access control, allowing a local user with limited privileges to potentially exploit it and escalate their access. Successful exploitation could result in significant privilege escalation, posing a potential risk to the affected systems. Organizations using these versions of Dell PowerProtect DD are encouraged to update to the latest releases to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share