CVE-2023-44284: Improper Neutralization of Special Elements used in an SQL Command

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database...

PT-2023-8731 · Dell · Dell Powerprotect Data Manager Dm5500

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager DM5500 version 5.14.0.0 Description: The issue is caused by a stack-based buffer overflow in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or...

Dell PowerProtect Data Manager Authorization Issues Vulnerability (CNVD-2024-3761184)

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An authorization issue vulnerability exists in Dell PowerProtect Data Manager version 19.14 and prior versions, which...

Dell PowerProtect Cyber Recovery Authentication Bypass (DSA-2023-201)

The version of Dell PowerProtect Cyber Recovery installed on the remote host is prior to 19.13.0.3. It is, therefore, affected by an authentication bypass vulnerability. An authenticated, remote attacker can exploit this vulnerability to get unauthorized admin access to the Cyber Recovery...

Dell PowerProtect Cyber Recovery 安全漏洞

Dell PowerProtect Cyber Recovery is a network data recovery software and solution from Dell USA. A security vulnerability exists in Dell PowerProtect Cyber Recovery. An attacker exploiting this vulnerability could take over the system completely...

Dell PowerProtect Data Manager Access Control Error Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An access control error vulnerability exists in Dell PowerProtect Data Manager version 19.12, 19.11, and 19.10, which...

Dell PowerProtect Cyber Recovery Installed (Linux)

Binary data dellcyberrecoverynixinstalled.nbin...

CVE-2022-34372

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images...

Authentication flaw

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images...

CVE-2022-34372

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images...

Dell PowerProtect Cyber Recovery 授权问题漏洞

Dell PowerProtect Cyber Recovery is a network data recovery software and solution from Dell USA. A security vulnerability exists in versions prior to Dell PowerProtect Cyber Recovery 19.11.0.2, which stems from the possibility that an unauthenticated, remote attacker could bypass authentication b...

CVE-2022-34372: Authentication Bypass Using an Alternate Path or Channel

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images...

CVE-2022-34372

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images...

PT-2022-4914 · Dell · Dell Powerprotect Cyber Recovery

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Cyber Recovery versions prior to 19.11.0.2 Description: The issue is related to an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API,...

CVE-2022-32481

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover...

CVE-2022-32481

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover...

Privilege escalation

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover...

CVE-2022-32481

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover...

CVE-2022-32481

Dell PowerProtect Cyber Recovery (pre-19.11) contains a local privilege-escalation vulnerability in virtual appliance deployments. A lower-privileged, authenticated user can chain docker commands to escalate to root, enabling full system takeover. Affected versions are prior to 19.11. Remediation...

CVE-2022-32481: Undefined Security Weakness

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover...