First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-39575

HighCVSS 7.4/10Last modified Oct 2, 2026

Description

update_disk_psu_baseline.sh requires password in plain text

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Dell	Dell EMC VxRail Appliance	< 7.0.520

References

https://www.dell.com/support/kbdoc/en-us/000226270/dsa-2024-247-security-update-for-dell-vxrail-7-0-520-multiple-third-party-component-vulnerabilities

Timeline

Published: Jun 16, 2026
Last modified: Oct 2, 2026
NVD status: Awaiting Analysis

Related CVEs from 2024

CVE-2024-395768.8Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker wit CVE-2024-395778.8Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements use CVE-2024-395786.3Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privile CVE-2024-395796.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged att CVE-2024-39586.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue CVE-2024-395806.7Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with loca CVE-2024-395819.8Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability. An unauthe CVE-2024-395824.4Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacker with local access CVE-2024-395839.8Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthent CVE-2024-395848.2Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could pot CVE-2024-395858.1Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. CVE-2024-395864.3Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker

CVE-2024-39575: High severity, CVSS 7.4 | Vulnix