CVE-2024-37143: Critical severity Dell PowerFlex appliance vulnerability
Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior to 5.1.1, and Dell Data Lakehouse versions prior to 1.2.0.0 contain an Improper Link Resolution Before File Access vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to execute arbitrary code on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37143?
CVE-2024-37143 has been rated as a critical vulnerability affecting multiple Dell products.
How do I fix CVE-2024-37143?
To remediate CVE-2024-37143, upgrade the affected products to the specified versions and apply the latest patches.
Which versions of Dell PowerFlex appliance are affected by CVE-2024-37143?
Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00 are affected by CVE-2024-37143.
What products are impacted by CVE-2024-37143?
CVE-2024-37143 impacts Dell PowerFlex appliance, PowerFlex rack, PowerFlex Manager, InsightIQ, and Data Lakehouse.
Is there a public reference for CVE-2024-37143?
Yes, a public reference for CVE-2024-37143 can be found in Dell's security documentation.