InfoSecBulletin Cybersecurity for mankind
Dell Technologies identified a security vulnerability in Dell Power Manager (DPM), in versions 3.15.0 and older. The vulnerability, named CVE-2024-39576, allows a low-privileged attacker with local access to execute code and gain higher privileges.
Vulnerability Details:
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
Lefteris Panos from LRQA Nettitude found the vulnerability in Dell Power Manager. This vulnerability is known as CVE-2024-39576. It is a type of vulnerability called Incorrect Privilege Assignment. It can be exploited by an attacker with low privileges and local access.
This vulnerability could allow attackers to run code and gain higher system privileges. It has a high severity score of 8.8 out of 10.
Users need to update their Dell Power Manager software to version 3.16.0 or later to reduce risks caused by a vulnerability.
“Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and Elevation of privileges.” said Dell released notes.
Affected Products:
Product: Dell Power Manager
Software/Firmware: Versions prior to 3.16.0
Remediated Versions: Dell Power Manager version 3.16.0 or later
Dell Technologies advises all customers to consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity of this security vulnerability.
