high7.8
CVE-2023-44285
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability.
Impact
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Data Protection | before 2.7.6 |
| Dell | Apex Protection Storage | before 6.2.1.110 from 7.0 before 7.10.1.15 |
| Dell | Powerprotect Data Domain | before 6.2.1.110 from 7.0 before 7.12.0.0 |
| Dell | Powerprotect Data Domain Management Center | before 6.2.1.110 from 7.0 before 7.13.0.10 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
| Dell | Emc Data Domain Os | before 6.2.1.110 from 7.0 before 7.12.0.0 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities