CVE-2024-28964: 
Dell EMC Common Event Enabler vulnerability analysis and mitigation

Dell Common Event Enabler (CEE) version 8.9.10.0 and prior contains an insecure deserialization vulnerability (CVE-2024-28964) in CAVATools component. The vulnerability was discovered and disclosed in March 2024, affecting Windows-based installations of Dell EMC Common Event Enabler (Dell Advisory).

The vulnerability is an insecure deserialization issue in the CAVATools component of Dell Common Event Enabler. It has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires local access and user interaction, specifically opening a malicious file, but does not require privileges for exploitation (Dell Advisory).

If successfully exploited, this vulnerability could lead to arbitrary code execution in the context of the logged-in user. The high CVSS score reflects the potential for complete compromise of system confidentiality, integrity, and availability within the scope of the affected user's permissions (Dell Advisory).

The vulnerability requires local access and user interaction for exploitation. Specifically, a victim must open a malicious file for the exploit to be successful. The attack complexity is considered low, indicating that the exploitation, once the preconditions are met, is straightforward (Dell Advisory).

Dell has released security updates to address this vulnerability in versions 8.9.8.21, 8.9.9.1, and 8.9.10.1. As a workaround, users are advised not to load .cavac files that cannot be trusted and to run CAVATool as a low-privileged user rather than an admin user (Dell Advisory).

Dell has acknowledged the contribution of security researcher Jakub Brzozowski (redfr0g) for reporting this vulnerability (Dell Advisory).