CVE-2024-47480

HIGH 7.8CVE-2024-47480 · Published 18/12/2024 · updated 17/06/2026

In short

CVE-2024-47480 is a HIGH (CVSS 7.8) vulnerability affecting inventory collector (dell).
Chance of exploitation in the next 30 days (EPSS): 0.19%, higher than 8.9% of all vulnerabilities.
Fix: update to 12.7.0 or later.

Package	Affected versions	Patched versions
inventory collector dell	`< 12.7.0`	`12.7.0`

Description

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access.

References

dell.com/support/kbdoc/en-us/000255700/dsa-2024-475 · Vendor Advisory

More vulnerabilities in inventory collector

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free