CVE-2024-47484: SQL Injection
First published: Tue Dec 10 2024(Updated: )
Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Avamar | >=19.0 | |
| All of | ||
| Any of | ||
| Dell EMC Avamar | =19.4 | |
| Dell EMC Avamar | =19.7 | |
| Dell EMC Avamar | =19.8 | |
| Dell EMC Avamar | =19.9 | |
| Dell EMC Avamar | =19.10 | |
| Dell EMC Avamar | =19.10-sp1 | |
| Any of | ||
| Dell EMC Avamar | =gen4t | |
| Dell EMC Avamar | =gen5a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-47484?
CVE-2024-47484 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2024-47484?
To fix CVE-2024-47484, you should apply the latest security updates provided by Dell for Avamar version 19.x.
What versions of Dell Avamar are affected by CVE-2024-47484?
CVE-2024-47484 affects Dell Avamar versions 19.0 through 19.10, including specific service packs.
Can CVE-2024-47484 be exploited without authentication?
Yes, CVE-2024-47484 can be exploited by unauthenticated remote attackers.
What type of vulnerability is CVE-2024-47484 classified as?
CVE-2024-47484 is classified as an SQL Injection vulnerability.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/dell
- canonical/dell emc avamar
- version/dell emc avamar/19.4
- version/dell emc avamar/19.7
- version/dell emc avamar/19.8
- version/dell emc avamar/19.9
- version/dell emc avamar/19.10
- version/dell emc avamar/19.10-sp1
- version/dell emc avamar/gen4t
- version/dell emc avamar/gen5a