Bundesamt für Sicherheit in der Informationstechnik Dell · cURL: Schwachstelle ermöglicht Offenlegung von Informationen
Affects Bundesamt für Sicherheit in der Informationstechnik DellSource GCVE Database
Not known to be exploited : upgrade to 8.4.0.0 when convenient.
Data as of 12 Nov 2026, 12:35 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 8.4.0.0
Exploitation evidence
Disclosed: evidence found.
CVE published 10 Dec 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 12 Nov 2026.
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Dell to 8.4.0.0.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Dell | Affected
| Fixed in
|
AI-suggested
Upgrade cURL to version 8.4.0.0 or later to remediate this vulnerability. No additional mitigation steps are indicated.
Description
A vulnerability in cURL prior to version 8.4.0.0 allows information disclosure. cURL is a client software used for transferring files over various protocols such as HTTP and FTP. The issue has been fixed in version 8.4.0.0.
References
- wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3676.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3676 (opens in a new tab)
- curl.se/docs/CVE-2024-11053.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2024-December/019987.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2024-December/019984.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2024-December/019983.html (opens in a new tab)
- ubuntu.com/security/notices/USN-7162-1 (opens in a new tab)
- lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/W3C7YLNBMW5MPRUQMR5IFUYVSRD5UKHG/ (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2024-December/020031.html (opens in a new tab)
- security.netapp.com/advisory/ntap-20250131-0003/ (opens in a new tab)
- de.tenable.com/security/tns-2025-10 (opens in a new tab)
- dell.com/support/kbdoc/de-de/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities (opens in a new tab)
- security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2025-June/021084.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2025-June/021215.html (opens in a new tab)
- ibm.com/support/pages/node/7235621 (opens in a new tab)
- advisory.splunk.com//advisories/SVD-2025-0710 (opens in a new tab)
- dell.com/support/kbdoc/000376224 (opens in a new tab)
- meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-01-lantime-firmware-v7-08-020.htm (opens in a new tab)
- ubuntu.com/security/notices/USN-8525-1 (opens in a new tab)