medium4.3
CVE-2023-44284
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability.
Impact
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized read access to application data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Data Protection | before 2.7.6 |
| Dell | Apex Protection Storage | before 6.2.1.110 from 7.0 before 7.10.1.15 |
| Dell | Powerprotect Data Domain | before 6.2.1.110 from 7.0 before 7.12.0.0 |
| Dell | Powerprotect Data Domain Management Center | before 6.2.1.110 from 7.0 before 7.13.0.10 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
| Dell | Emc Data Domain Os | before 6.2.1.110 from 7.0 before 7.12.0.0 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities