CVE-2024-47481

MEDIUM

Dell Data Lakehouse 1.0.0.0 1.1.0 - Unauthenticated Denial of Service

Title source: llm

Description

Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.dell.com/support/kbdoc/en-us/000240535/dsa-2024-419-security-update-for-dell-data-lakehouse-system-software-for-multiple-third-party-component-vulnerabilities

Scores

CVSS v3 6.5

EPSS 0.0019

EPSS Percentile 41.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (2)

dell/data_lakehouse 1.0.0.0

dell/data_lakehouse 1.1.0.0

Published Oct 25, 2024

Tracked Since Feb 18, 2026