CVE-2024-28974: Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could…

PriorityP432medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

0.13%

2.8th percentile

Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	data_protection_advisor	>= 19.5 < 19.9	19.9
dell	data_protection_advisor	19.5 – 19.9	—
dell	dp4400_firmware	<= 2.7.6	—
dell	dp5900_firmware	<= 2.7.6	—
dell	powerprotect_dp_series_appliance	N/A – 2.7.6	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.