CVE-2024-51534

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unauthorized overwrite of OS files stored on the server filesystem. Exploitation could lead to denial of service.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-29 CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Feb 1, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-515392.3The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to impro CVE-2024-51548.1A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). CVE-2024-515406.5Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticat CVE-2024-515417.5Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; CVE-2024-515428.2Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v CVE-2024-515437.5Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise CVE-2024-515448.2Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - E CVE-2024-515459.8Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: CVE-2024-515467.5Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08 CVE-2024-515479.8Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterpri CVE-2024-515488.8Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Seri CVE-2024-515499.4Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterpr