NetSight
IP …
high7.8

CVE-2023-44277

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI.

Impact

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

Affected products

VendorProductAffected versions
DellPowerprotect Data Protection
before 2.7.6
DellApex Protection Storage
before 6.2.1.110
from 7.0 before 7.10.1.15
DellPowerprotect Data Domain
before 6.2.1.110
from 7.0 before 7.12.0.0
DellPowerprotect Data Domain Management Center
before 6.2.1.110
from 7.0 before 7.13.0.10
from 7.7 before 7.7.5.25
from 7.10 before 7.10.1.15
DellEmc Data Domain Os
before 6.2.1.110
from 7.0 before 7.12.0.0
from 7.7 before 7.7.5.25
from 7.10 before 7.10.1.15

Weakness classification

CWE-78

References