CVE-2024-32853

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

No affected versions have been published.

Timeline

Published: Jul 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-328546.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privilege attack CVE-2024-328554.4Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker wit CVE-2024-328566.0Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328577.8Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially CVE-2024-328588.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328598.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-32867.5A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart CVE-2024-328608.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328617.8Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.CVE-2024-328628.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.CVE-2024-328638.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)CVE-2024-328648.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)