CVE-2023-48667

🗓️ 14 Dec 2023 15:40:07Reported by dellType

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 OS command injection vulnerabilit

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-48667	11 Jan 202408:21	–	circl
CNNVD	Dell PowerProtect Data Domain Operating System Command Injection Vulnerability	14 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-48667	14 Dec 202315:40	–	cvelist
EUVD	EUVD-2023-52711	3 Oct 202520:07	–	euvd
NVD	CVE-2023-48667	14 Dec 202316:15	–	nvd
OSV	CVE-2023-48667	14 Dec 202316:15	–	osv
Prion	Command injection	14 Dec 202316:15	–	prion
Positive Technologies	PT-2023-30888 · Dell · Dell Powerprotect Dd	14 Dec 202300:00	–	ptsecurity

NVD

Vulners

Node

dell apex_protection_storageRange<6.2.1.110

dell apex_protection_storageRange7.0–7.10.1.15

dell powerprotect_data_domainRange<6.2.1.110virtual

dell powerprotect_data_domainRange7.0–7.12.0.0virtual

dell powerprotect_data_domain_management_centerRange<6.2.1.110

dell powerprotect_data_domain_management_centerRange7.0–7.13.0.10

dell emc_data_domain_osRange<6.2.1.110

dell emc_data_domain_osRange7.0–7.12.0.0

dell emc_data_domain_osRange7.7–7.7.5.25lts2022

dell emc_data_domain_osRange7.10–7.10.1.15lts2023

dell powerprotect_data_domain_management_centerRange7.7–7.7.5.25lts2022

dell powerprotect_data_domain_management_centerRange7.10–7.10.1.15lts2023

AND

dell dd3300Match-

dell dd6400Match-

dell dd6900Match-

dell dd9400Match-

dell dd9900Match-

Node

dell powerprotect_data_protectionRange<2.7.6

AND

dell dp4400Match-

dell dp5900Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerProtect DD",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities

21 Nov 2024 08:32Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.2

EPSS0.00033

CWE-78

cve-2023-48667 dell powerprotect dd os command injection security vulnerability remote attacker system takeover