power manager vulnerabilities and fixes
Recent CVEs affecting power manager, with upgrade or downgrade steps. 2 tracked.
Also searched as: powermanager.
power manager has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-12-09. Highest priority: CVE-2024-39576 (score 32/100).
- CVE-2024-49600 HIGH 7.8 UPGRADE Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability
- CVE-2024-39576 HIGH 8.8 UPGRADE Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability
FAQ
How do I fix power manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is power manager being exploited right now?
None of the tracked power manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which power manager CVE should I patch first?
CVE-2024-39576 currently ranks highest (32/100): Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability.