Dell Powerprotect Data Manager DM5500 Firmware vulnerabilities

4 CVEs affecting Dell Powerprotect Data Manager DM5500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44302, published 2023-12-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44291, published 2023-12-04. High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days. Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution…
CVE-2023-44302, published 2023-12-04. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access of resources or…
CVE-2023-44301, published 2023-12-04. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this vulnerability, leading to the execution…
CVE-2023-44300, published 2023-12-04. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this vulnerability, leading to the disclosure…