Dell Power Manager vulnerabilities

5 CVEs affecting Dell Power Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49600, published 2024-12-09.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-32450, published 2023-07-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code…
• CVE-2024-49600, published 2024-12-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading…
• CVE-2023-28051, published 2023-04-07. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the…
• CVE-2023-25543, published 2024-02-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to…
• CVE-2024-39576, published 2024-08-22. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this…