CVE-2024-30472

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:microsoft:telemetry_dashboard:1.0.0.8:*:*:*:*:*:*:*

cpe:2.3:o:dell:thinos:2402:*:*:*:*:*:*:*

History

09 Oct 2024, 14:12

Type	Values Removed	Values Added
First Time		Dell thinos Dell Microsoft telemetry Dashboard Microsoft
CVSS	v2 : ~~unknown~~ v3 : ~~7.5~~	v2 : unknown v3 : 5.5
References	~~() https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229 -~~	() https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229 - Vendor Advisory
CPE		cpe:2.3:a:microsoft:telemetry_dashboard:1.0.0.8:::::::* cpe:2.3:o:dell:thinos:2402:::::::*
CWE		NVD-CWE-noinfo

13 Jun 2024, 18:35

Type	Values Removed	Values Added
Summary		(es) Telemetry Dashboard v1.0.0.8 para Dell ThinOS 2402 contiene una vulnerabilidad de divulgación de información confidencial. Un usuario no autenticado con acceso local al dispositivo podría aprovechar esta vulnerabilidad y provocar la divulgación de información.

13 Jun 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-13 12:15

Updated : 2024-10-09 14:12

NVD link : CVE-2024-30472

Mitre link : CVE-2024-30472

CVE.ORG link : CVE-2024-30472

JSON object : View

Products Affected

dell

thinos

microsoft

telemetry_dashboard

CWE

NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-30472", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-06-13T12:15:10.410", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure."}, {"lang": "es", "value": "Telemetry Dashboard v1.0.0.8 para Dell ThinOS 2402 contiene una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n confidencial. Un usuario no autenticado con acceso local al dispositivo podr\u00eda aprovechar esta vulnerabilidad y provocar la divulgaci\u00f3n de informaci\u00f3n."}], "lastModified": "2024-10-09T14:12:54.947", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:telemetry_dashboard:1.0.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "956FF6F5-3C99-4783-B4AE-FD4CC949F97D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:thinos:2402:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ECA47B8D-21C0-4AF5-B975-DE6DA9D73FC1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security_alert@emc.com"}