CVE Feed

    Dashboard / CVE / CVE-2024-37143

    CVE-2024-37143

    Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior to 5.1.1, and Dell Data Lakehouse versions prior to 1.2.0.0 contain an Improper Link Resolution Before File Access vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to execute arbitrary code on the system.

    Published:Dec 10, 2024
    Last Modified:Jan 22, 2026
    EPS:Dec 10, 2024
    EPSS Score:0.00457
    CVSS Score:10

    Affected Products

    Vendor
    Dell
    Product
    Data Lakehouse
    Vendor
    Dell
    Product
    Insightiq
    Vendor
    Dell
    Product
    Powerflex Appliance Intelligent Catalog
    Vendor
    Dell
    Product
    Powerflex Manager
    Vendor
    Dell
    Product
    Powerflex Rack Release Certification Matrix

    Exploits

    No exploit reference

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High