PT-2024-7333 · Dell · Dell Openmanage Enterprise

B4Gpipe · Published 2024-10-16 · Updated 2025-11-20 · CVE-2024-45766

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions OME 4.1 and prior

Description: The issue is related to improper control of code generation, which could allow a remote attacker with low privileges to execute arbitrary code. This is a code injection vulnerability that can be exploited remotely.

Recommendations: For versions OME 4.1 and prior, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-08689

CVE-2024-45766

Affected Products

Dell Openmanage Enterprise

References · 15

• https://dell.com/support/kbdoc/en-us/000237300/dsa-2024-426-security-update-for-dell-openmanage-enterprise-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45766 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45766 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08689 · Security Note
• https://vuldb.com/?id.280707 · Note
• https://twitter.com/cracbot/status/1848605331502600360 · Twitter Post
• https://t.me/cvenotify/98410 · Telegram Post
• https://twitter.com/CVEnew/status/1846761023866638699 · Twitter Post
• https://twitter.com/SecuriTricks/status/1846970478650368146 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1846823849922375781 · Twitter Post
• https://twitter.com/vuldb/status/1846790506816458781 · Twitter Post
• https://t.me/latest_high_impact_cve/1348 · Telegram Post
• https://t.me/cvenotify/102800 · Telegram Post
• https://twitter.com/dailycve/status/1991296828189323340 · Twitter Post
• https://t.me/cvedetector/8138 · Telegram Post