Dell Nativeedge Orchestrator vulnerabilities

3 CVEs affecting Dell Nativeedge Orchestrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-52543, published 2024-12-25.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-53291, published 2024-12-25. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
• CVE-2024-52543, published 2024-12-25. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this…
• CVE-2024-47978, published 2024-12-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,…