Vulnerability details

CVE-2024-53291

Dell NativeEdge
CVSS 3.1
7.5High

Official description

Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS scores

ScoreVersionSourceVector
7.5High 3.1 CVEProject cvelistV5 (CNA) (dell) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Dell NativeEdge v < 2.1.0.0 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2024-12-25
Last updated
2024-12-27
State
Published
Assigner (CNA)
dell

Exploit prediction (EPSS)

0.3%
Probability of exploitation in 30 days
23.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-1230
    Exposure of Sensitive Information Through Metadata