Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-44277

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

Published

2023-12-14T15:15:08.093

Last Modified

2024-11-21T08:25:34.403

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell powerprotect_data_protection < 2.7.6 Yes
Hardware dell dp4400 - No
Hardware dell dp5900 - No
Application dell apex_protection_storage < 6.2.1.110 Yes
Application dell apex_protection_storage < 7.10.1.15 Yes
Application dell powerprotect_data_domain < 6.2.1.110 Yes
Application dell powerprotect_data_domain < 7.12.0.0 Yes
Application dell powerprotect_data_domain_management_center < 6.2.1.110 Yes
Application dell powerprotect_data_domain_management_center < 7.13.0.10 Yes
Operating System dell emc_data_domain_os < 6.2.1.110 Yes
Operating System dell emc_data_domain_os < 7.12.0.0 Yes
Operating System dell emc_data_domain_os < 7.7.5.25 Yes
Operating System dell emc_data_domain_os < 7.10.1.15 Yes
Operating System dell powerprotect_data_domain_management_center < 7.7.5.25 Yes
Operating System dell powerprotect_data_domain_management_center < 7.10.1.15 Yes
Hardware dell dd3300 - No
Hardware dell dd6400 - No
Hardware dell dd6900 - No
Hardware dell dd9400 - No
Hardware dell dd9900 - No
References