CVE-2024-24909

HighCVSS 8.8/10Last modified Oct 2, 2026

Description

Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Jun 16, 2026
Last modified: Oct 2, 2026
NVD status: Awaiting Analysis

Related CVEs from 2024

CVE-2024-24915.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multip CVE-2024-249107.3A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identit CVE-2024-249117.5In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump CVE-2024-249126.7A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To CVE-2024-249148.0Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this v CVE-2024-249157.2Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole pro CVE-2024-249167.8Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's CVE-2024-249198.6Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled wit CVE-2024-24925.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all ver CVE-2024-249207.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249217.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corrupt CVE-2024-249227.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write