CVE-2024-53291: high-severity vulnerability in Dell NativeEdge
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Dell NativeEdge version 2.1.0.0 leaks sensitive information through metadata that can be accessed without logging in. An attacker on the internet could read this exposed data to gain unauthorized access to system details.
Dell NativeEdge 2.1.0.0 contains a metadata exposure vulnerability (CWE-1230) allowing unauthenticated remote attackers to retrieve sensitive information. The vulnerability requires only network access with no authentication; successful exploitation results in information disclosure that could facilitate further attacks.
In the same product, most dangerous first.