What is the CVSS score of CVE-2024-38487?

CVE-2024-38487 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2024-38487?

Yes, a patch is available for CVE-2024-38487. Update the affected software to the latest version immediately.

Emc Vxrail Appliance CVE-2024-38487

EUVD-2024-55624 HIGH

Improper Privilege Management (CWE-269)

2026-06-16 dell

GHSA-7fr8-453x-xxrc

Privilege Escalation Emc Vxrail Appliance

7.0

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Primary rating from Vendor (dell) · only source for this CVE.

CVSS VectorVendor: dell

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Patch available

Jun 16, 2026 - 18:01 EUVD

CVE Published

Jun 16, 2026 - 16:29 cve.org

HIGH 7.0

DescriptionCVE.org

api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions.

AnalysisAI

api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions. Rated high severity (CVSS 7.0). This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions. Affected products include: Dell Emc Vxrail Appliance.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply principle of least privilege, validate privilege transitions, implement proper role separation.