CVE-2024-37139: dell data_domain_operating_system

Vulnerability summary

CVE-2024-37139 is a medium (CVSS 6.5) vulnerability in dell data_domain_operating_system. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 39.9% of scored vulnerabilities.

Timeline

1. 26-06-2024
   PublishedVulnerability first disclosed.
2. 02-08-2024
   Last modifiedVulnerability information updated.

Description

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin operation. A remote low privileged attacker could potentially exploit this vulnerability, leading to temporary resource constraint of system application. Exploitation may lead to denial of service of the application.

• CWE-664Improper Control of a Resource Through its LifetimeThe product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.