Vulnerabilities of the software for the centralized management of PowerProtect Data Domain Management Centers, the data protection software for corporate environments – PowerProtect Data Protection; the data protection software for data backup through PowerProtect Data Domain; the operating system EMC Data Domain OS; the data protection software for corporate environments using cloud technologies – APEX Protection Storage. These vulnerabilities allow attackers to exploit them to disclose protected information.

🗓️ 20 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

PowerProtect vulnerabilities allow disclosure of protected data via unprotected SQL queries.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-44284	10 Jan 202422:46	–	circl
CNNVD	Dell PowerProtect Data Domain SQL Injection Vulnerability	14 Dec 202300:00	–	cnnvd
CVE	CVE-2023-44284	14 Dec 202315:26	–	cve
Cvelist	CVE-2023-44284	14 Dec 202315:26	–	cvelist
EUVD	EUVD-2023-48640	3 Oct 202520:07	–	euvd
NVD	CVE-2023-44284	14 Dec 202316:15	–	nvd
OSV	CVE-2023-44284	14 Dec 202316:15	–	osv
Prion	Sql injection	14 Dec 202316:15	–	prion
Positive Technologies	PT-2023-9120 · Dell · Dell Powerprotect Dd	14 Dec 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-44284	14 Dec 202315:26	–	vulnrichment

Vulners

Node

OR

dell_technologies powerprotect_data_protectionRange<2.7.6

dell_technologies powerprotect_dd_management_centerRange<6.2.1.110

dell_technologies powerprotect_dd_management_centerRange7.0–7.13.0.10

dell_technologies powerprotect_dd_management_centerRange7.7–7.7.5.25

dell_technologies powerprotect_dd_management_centerRange7.10–7.10.1.15

dell_technologies powerprotect_data_domainRange<6.2.1.110

dell_technologies powerprotect_data_domainRange7.0–7.12.0.0

dell_technologies apex_protection_storageRange<6.2.1.110

dell_technologies apex_protection_storageRange7.0–7.10.1.15

dell_technologies data_domain_operating_systemRange<6.2.1.110

dell_technologies data_domain_operating_systemRange7.0–7.12.0.0

dell_technologies data_domain_operating_systemRange7.7–7.7.5.25

dell_technologies data_domain_operating_systemRange7.10–7.10.1.15

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail
debian	www.debian.org/security/dsa-2023-412/

20 May 2024 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24

CVSS 34.3

EPSS0.00569

PowerProtect data domain PowerProtect data protection APEX Protection Storage