Analysis Summary

CVE-2024-39581 CVSS:7.3

Dell PowerScale InsightIQ could allow a remote attacker to bypass security restrictions caused by improper access control for files or directories. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass access restrictions to read, modify, and delete arbitrary files.

CVE-2024-39583 CVSS:8.1

Dell PowerScale InsightIQ could allow a remote authenticated attacker to gain elevated privileges on the system caused by the use of a broken or risky cryptographic algorithm vulnerability.

Impact

• Security Bypass
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2024-39581
• CVE-2024-39583

Affected Vendors

Remediation

Refer to Dell Security Advisory for patch, upgrade or suggested workaround information.

Dell Security Advisory