« Volver al listado

CVE-2024-51532

Estado: AnalizadaAlta (7.1)—

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:L y PR:L sin interacción (UI:N) → T1068. Argument Injection (CWE-88) permite modificar archivos del sistema arbitrarios tras elevar privilegios locales, impactando integridad (T1565.001) y potencialmente cuentas del sistema (T1078.001).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramRestrict File and Directory PermissionsRemote Data StorageExecution PreventionEncrypt Sensitive InformationApplication Isolation and Sandboxing

Tecnologías afectadas (1)

Dell — Powerstoreos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-51532",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-51532",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-24T00:31:33.513216Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "PowerStore",
          "versions": [
            {
              "status": "affected",
              "version": "N/A",
              "lessThan": "4.0.1.0-2408234",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-12-19T02:15:23.000",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-88"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
    },
    {
      "lang": "es",
      "value": "Dell PowerStore contiene una vulnerabilidad de neutralización incorrecta de delimitadores de argumentos en un comando ('inyección de argumentos'). Un atacante con poco nivel de privilegios y acceso local podría aprovechar esta vulnerabilidad, lo que provocaría la modificación de archivos arbitrarios del sistema."
    }
  ],
  "lastModified": "2026-09-11T13:31:30.093",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35CCA317-3D37-4B48-A513-A9D907C3A5B7",
              "versionEndExcluding": "4.0.1.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FD5BE2B0-BB56-4E6C-8818-26910B23CE31"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AB965674-7EBA-437E-A13B-39BC3F3FE139"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "861B5BE7-159A-41FF-9658-D243051CAC88"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8456D5B0-3D6A-4020-B693-D949EE2BA12E"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E0A29ED1-5CE6-4D49-A079-7F4E6D782DE1"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2D5EE934-AD08-4C2B-B3EA-878975EE825E"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6B529671-71A1-428C-BC17-C8E002222FEA"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F0FCFFD4-A989-4AF3-99DF-32AE2547D9C1"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "37E8CD6E-65F4-48A0-B796-93E4EE51BD06"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D9BB1B88-C9C0-4B08-84C6-279C79E34CD3"
            },
            {
              "criteria": "cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F90EFCBC-F720-4426-8043-EB1489820C22"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}