PT-2024-23401 · Dell · Telemetry Dashboard

Matrixpdb · Published 2024-06-13 · Updated 2024-10-09 · CVE-2024-30472

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Telemetry Dashboard version 1.0.0.8 for Dell ThinOS 2402

Description The issue concerns a sensitive information disclosure vulnerability. It can be exploited by an unauthenticated user with local access to the device, potentially leading to information disclosure.

Recommendations For Telemetry Dashboard version 1.0.0.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-30472

Affected Products

Telemetry Dashboard

References · 3

• https://osv.dev/vulnerability/CVE-2024-30472 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30472 · Security Note
• https://dell.com/support/kbdoc/en-us/000225289/dsa-2024-229 · Vendor Advisory