CVE-2024-37126: Medium severity Dell PowerScale OneFS vulnerability
Published Jul 2, 2024
·Updated
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access.
Affected Software
2 affected components
Dell PowerScale OneFS=9.8.0.0
Dell PowerScale OneFS>=8.2.2<9.7.1.0
Event History
Jul 2, 2024
CVE Published
via MITRE·07:28 AM
Data Sourced
via MITRE·07:28 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-37126?
CVE-2024-37126 is considered a high severity vulnerability due to its potential to allow unauthorized root-level access.
2
How do I fix CVE-2024-37126?
To mitigate CVE-2024-37126, upgrade your Dell PowerScale OneFS system to a patched version as per Dell's security advisory.
3
Who is affected by CVE-2024-37126?
CVE-2024-37126 affects Dell PowerScale OneFS versions from 8.2.2.x up to 9.8.0.0.
4
What type of vulnerability is CVE-2024-37126?
CVE-2024-37126 is categorized as an improper privilege management vulnerability.
5
Can CVE-2024-37126 be exploited remotely?
No, CVE-2024-37126 requires a local high privileged attacker to exploit the vulnerability.