CVE-2024-51532

HighCVSS 7.1/10Last modified Sep 11, 2026

Description

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2024
Last modified: Sep 11, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-515347.1Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged CVE-2024-515392.3The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to impro CVE-2024-51548.1A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). CVE-2024-515406.5Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticat CVE-2024-515417.5Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; CVE-2024-515428.2Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v CVE-2024-515437.5Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise CVE-2024-515448.2Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - E CVE-2024-515459.8Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: CVE-2024-515467.5Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08 CVE-2024-515479.8Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterpri CVE-2024-515488.8Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Seri