CVE-2024-39575

HighCVSS 7.4/10Last modified Oct 2, 2026

Description

update_disk_psu_baseline.sh requires password in plain text

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H

Weakness enumeration

CWE-256

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Jun 16, 2026
Last modified
Oct 2, 2026
NVD status
Awaiting Analysis

Related CVEs from 2024

CVE-2024-395768.8Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker witCVE-2024-395778.8Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements useCVE-2024-395786.3Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileCVE-2024-395796.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attCVE-2024-39586.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue CVE-2024-395806.7Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with locaCVE-2024-395819.8Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability. An unautheCVE-2024-395824.4Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacker with local access CVE-2024-395839.8Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthentCVE-2024-395848.2Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potCVE-2024-395858.1Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. CVE-2024-395864.3Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker
CVE-2024-39575: High severity, CVSS 7.4 | Vulnix