CVE Catalog
CVE-2024-37129
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
Dell Inventory Collector versions prior to 12.3.0.6 contain a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to achieve arbitrary code execution on the system.
Risk Assessment
An attacker with local access can gain unauthorized file access and execute arbitrary code, potentially leading to full system compromise.
Recommendation
Upgrade Dell Inventory Collector to version 12.3.0.6 or later.
Original NVD description (English source)
Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.