CVE-2024-24908

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: May 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-249098.8Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remo CVE-2024-24915.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multip CVE-2024-249107.3A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identit CVE-2024-249117.5In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump CVE-2024-249126.7A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To CVE-2024-249148.0Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this v CVE-2024-249157.2Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole pro CVE-2024-249167.8Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's CVE-2024-249198.6Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled wit CVE-2024-24925.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all ver CVE-2024-249207.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249217.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corrupt