First published: Tue Dec 10 2024(Updated: )
Dell Avamar, version(s) 19.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell EMC Avamar | >=19.0 | |
All of | ||
Any of | ||
Dell EMC Avamar | =19.4 | |
Dell EMC Avamar | =19.7 | |
Dell EMC Avamar | =19.8 | |
Dell EMC Avamar | =19.9 | |
Dell EMC Avamar | =19.10 | |
Dell EMC Avamar | =19.10-sp1 | |
Any of | ||
Dell EMC Avamar | =gen4t | |
Dell EMC Avamar | =gen5a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-52538 is categorized as a low severity vulnerability.
To fix CVE-2024-52538, update Dell Avamar to the latest patched version as specified in official Dell security updates.
CVE-2024-52538 can be exploited by low privileged attackers to perform SQL injection attacks.
CVE-2024-52538 affects Dell Avamar versions 19.0 through 19.10-sp1.
Yes, CVE-2024-52538 allows low privileged attackers to potentially exploit the vulnerability remotely.