medium6.7
CVE-2023-44279
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI.
Impact
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could potentially exploit this vulnerability, to bypass security restrictions. Exploitation may lead to a system take over by an attacker
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Data Protection | before 2.7.6 |
| Dell | Apex Protection Storage | before 6.2.1.110 from 7.0 before 7.10.1.15 |
| Dell | Powerprotect Data Domain | before 6.2.1.110 from 7.0 before 7.12.0.0 |
| Dell | Powerprotect Data Domain Management Center | before 6.2.1.110 from 7.0 before 7.13.0.10 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
| Dell | Emc Data Domain Os | before 6.2.1.110 from 7.0 before 7.12.0.0 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities