CVE-2024-53291 HIGH

CVE-2024-53291

Vendor Dell

Product NativeEdge

Weakness CWE-1230

Published December 25, 2024

Last update December 27, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Key dates

02Disclosure timeline

December 25, 2024 CVE published

December 27, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-53291 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1230.html

Related vulnerabilities

04Related CVE

CVE-2026-27661 CVE-2026-29055 Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII CVE-2024-47517 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access CVE-2024-49395 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block CVE-2026-45544 Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService