InfoSecBulletin Cybersecurity for mankind
Dell Technologies identified a security vulnerability in Dell Power Manager (DPM), in versions 3.15.0 and older. The vulnerability, named CVE-2024-39576, allows a low-privileged attacker with local access to execute code and gain higher privileges.
Vulnerability Details:
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
Lefteris Panos from LRQA Nettitude found the vulnerability in Dell Power Manager. This vulnerability is known as CVE-2024-39576. It is a type of vulnerability called Incorrect Privilege Assignment. It can be exploited by an attacker with low privileges and local access.
This vulnerability could allow attackers to run code and gain higher system privileges. It has a high severity score of 8.8 out of 10.
Users need to update their Dell Power Manager software to version 3.16.0 or later to reduce risks caused by a vulnerability.
“Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and Elevation of privileges.” said Dell released notes.
Affected Products:
Product: Dell Power Manager
Software/Firmware: Versions prior to 3.16.0
Remediated Versions: Dell Power Manager version 3.16.0 or later
Dell Technologies advises all customers to consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity of this security vulnerability.
