Vulnerability · Published Dec 4, 2023 · Assigned by dell

CVE-2023-44305

High 8.1

In plain English

A high-severity stack buffer overflow in Dell PowerProtect Data Manager DM5500 Appliance from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)1.0%top 35.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.

Affected products (as reported)

VendorProductVersions
Dell Dell PowerProtect Data Manager DM5500 Appliance DM5500 5.14 and below

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References