Analysis Summary

CVE-2024-37136 CVSS:6.8

Dell Path to PowerProtect could allow a remote attacker to obtain sensitive information, caused by unauthorized actor vulnerability. By sending a specially crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information and use this information to launch further attacks against the affected system.

CVE-2024-38296 CVSS:6.7

Dell Edge Gateway 5200 (Coffee Lake S) could allow a remote attacker to obtain sensitive information, caused by Shared Microarchitectural Structures during Transient Execution vulnerability. By sending a specially crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information and use this information to launch further attacks against the affected system.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-37136

• CVE-2024-38296

Affected Vendors

Remediation

Refer to Dell Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2024-37136

CVE-2024-38296