CVE-2024-24909

Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000222075/dsa-2024-084-security-update-for-dell-openmanage-integration-with-microsoft-windows-admin-center?lang=en

Configurations

No configuration.

History

02 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Dell OpenManage Integration con Microsoft Windows Admin Center contiene una vulnerabilidad de ejecución remota de código en el plugin de la pasarela. Un usuario remoto autenticado podría potencialmente explotar esta vulnerabilidad para escalar privilegios. El usuario malicioso podría obtener la capacidad de ejecutar código arbitrario de forma remota. Esta es una vulnerabilidad de alta gravedad, por lo que Dell recomienda a los clientes actualizar a la mayor brevedad posible.

Information

Published : 2026-06-16 17:16

Updated : 2026-10-02 00:10

NVD link : CVE-2024-24909

Mitre link : CVE-2024-24909

CVE.ORG link : CVE-2024-24909

JSON object : View

Products Affected

No product.

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2024-24909", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-24909", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-17T03:55:56.359410Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "OpenManage", "versions": [{"status": "affected", "version": "0", "lessThan": "3.2", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-16T17:16:28.303", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000222075/dsa-2024-084-security-update-for-dell-openmanage-integration-with-microsoft-windows-admin-center?lang=en", "source": "security_alert@emc.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity."}, {"lang": "es", "value": "Dell OpenManage Integration con Microsoft Windows Admin Center contiene una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en el plugin de la pasarela. Un usuario remoto autenticado podr\u00eda potencialmente explotar esta vulnerabilidad para escalar privilegios. El usuario malicioso podr\u00eda obtener la capacidad de ejecutar c\u00f3digo arbitrario de forma remota. Esta es una vulnerabilidad de alta gravedad, por lo que Dell recomienda a los clientes actualizar a la mayor brevedad posible."}], "lastModified": "2026-10-02T00:10:00.180", "sourceIdentifier": "security_alert@emc.com"}