CVE-2024-28974 | THREATINT

Assigner	dell
Reserved	2024-03-13
Published	2024-05-29
Updated	2024-06-06

Description

Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

HIGH: 7.6

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Problem types

CWE-326: Inadequate Encryption Strength

Product status

Default status

unaffected

19.5

affected

Default status

unaffected

Any version

affected

References

https://www.dell.com/support/kbdoc/en-us/000225088/dsa-2024-192-security-update-for-data-protection-advisor-and-powerprotect-dp-series-appliance-idpa-for-multiple-vulnerabilities vendor-advisory

cve.org CVE-2024-28974

nvd.nist.gov CVE-2024-28974

Download JSON