CVE-2024-45761 Code injection in Dell OpenManage Server Administrator
A remote low-privileged user can exploit improper input validation to load malicious plugins or classes, potentially altering application behavior or causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45761?
CVE-2024-45761 is a medium-severity code injection vulnerability in Dell OpenManage Server Administrator, published on 9 Dec 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability. A remote low-privileged malicious user could potentially exploit this vulnerability to load any web plugins or Java class leading to the possibility of altering the behavior of certain apps/OS or Denial of Service.
Weakness: CWE-20
Which versions are affected by CVE-2024-45761?
It affects 1 product.
Products include Dell Openmanage Server Administrator.
How do I fix CVE-2024-45761?
No fix has been published for CVE-2024-45761 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-45761 being exploited?
There is no known exploitation of CVE-2024-45761 in the wild and no public exploit code.
Other vulnerabilities in Dell OpenManage Server Administrator
- CVE-2021-21513 Auth bypass in Dell Open Manage Server Administrator
- CVE-2026-81442 Privilege escalation in OpenManage Server Administrator Managed Node (Patch) for Windows
- CVE-2026-81475 Auth bypass in OpenManage Server Administrator Managed Node (Patch) for Windows
- CVE-2026-81476 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Comm
- CVE-2026-81478 Hardcoded credentials in OpenManage Server Administrator Managed Node (Patch) for Windows
Sources
Also known as GHSA-7928-q347-xx6q.