Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2025-02-13 CVE-2025-22480 Link Following vulnerability in Dell Supportassist 3.2.0.90
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability.
local
low complexity
dell CWE-59
7.8
2025-02-04 CVE-2025-22475 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Dell Data Domain Operating System
Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability.
network
low complexity
dell CWE-327
7.5
2025-02-01 CVE-2024-53295 Unspecified vulnerability in Dell Data Domain Operating System
Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability.
local
low complexity
dell
7.8
2025-02-01 CVE-2024-51534 Path Traversal vulnerability in Dell Data Domain Operating System
Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability.
local
low complexity
dell CWE-22
7.1
2025-02-01 CVE-2024-53296 Out-of-bounds Write vulnerability in Dell Data Domain Operating System
Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI.
network
low complexity
dell CWE-787
4.9
2025-01-30 CVE-2025-21107 Unquoted Search Path or Element vulnerability in Dell Networker
Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability.
local
low complexity
dell CWE-428
7.8
2025-01-30 CVE-2025-23374 Information Exposure Through Log Files vulnerability in Dell Enterprise Sonic Distribution
Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability.
network
low complexity
dell CWE-532
4.9
2025-01-15 CVE-2025-21101 Race Condition vulnerability in Dell Display Manager
Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.
local
high complexity
dell CWE-362
6.3
2025-01-15 CVE-2025-22394 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Dell Display Manager
Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
local
high complexity
dell CWE-367
7.0
2025-01-08 CVE-2025-21111 Insufficiently Protected Credentials vulnerability in Dell products
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability.
local
low complexity
dell CWE-522
4.4