PT-2024-22782 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD versions 7.13.1.0 Dell PowerProtect DD versions 7.10.1.30 Dell PowerProtect DD versions 7.7.5.40 Description: The issue is related to an Out-of-bounds Write vulnerability, also...

CVE-2024-29175: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to man-in-the-middle attack that exposes sensitive session...

CVE-2024-29177: Insertion of Sensitive Information into Log File

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain...

PT-2024-22779

Name of the Vulnerable Software and Affected Versions Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description A Server-Side Request Forgery SSRF issue exists, allowing a remote high privileged...

PT-2024-22655

Name of the Vulnerable Software and Affected Versions Dell PowerProtect DD versions prior to 8.0 Description A Stored Cross-Site Scripting issue allows a remote high privileged attacker to store malicious HTML or JavaScript codes in a trusted application data store. When a high privileged victim...

CVE-2024-28973: Improper Neutralization of Input During Web Page Generation

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted...

CVE-2024-29173: Server-Side Request Forgery (SSRF)

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery SSRF vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client...

PT-2024-27330 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description: The issue is an OS command injection vulnerability in an admin operation. A remote...

CVE-2024-37141: URL Redirection to Untrusted Site

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an open redirect vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-37138: Relative Path Traversal

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the application sending over an unauthorized file to the manag...

CVE-2024-37140: Improper Neutralization of Special Elements used in an OS Command

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection vulnerability in an admin operation. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the syste...

CVE-2024-37139: Improper Control of a Resource Through its Lifetime

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin operation. A remote low privileged attacker could potentially exploit this vulnerability, leading to temporary resource...

CVE-2024-29176: Out-of-bounds Write

Dell PowerProtect DD, versions 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contains an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

Dell PowerProtect Data Domain Improper Resource Control Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A resource miscontrol vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 allows a intruder to perform arbitrary actions.

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Vulnerabilities of the software for the centralized management of PowerProtect Data Domain Management Centers, the data protection software for corporate environments – PowerProtect Data Protection; the data protection software for data backup through PowerProtect Data Domain; the operating system EMC Data Domain OS; the data protection software for corporate environments using cloud technologies – APEX Protection Storage. These vulnerabilities allow attackers to exploit them to disclose protected information.

The vulnerabilities of the PowerProtect Data Domain Management Center software, a data protection tool for corporate environments, and the PowerProtect Data Protection software for data backup purposes are related to the lack of protection for SQL query structures. Exploiting these vulnerabilitie...

Dell PowerProtect DM5500 Directory Traversal Vulnerability

Dell PowerProtect DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. A directory traversal vulnerability exists in Dell PowerProtect DM5500 version 5.15.0.0 and prior versions, which can be exploited...

CVE-2024-24908

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem...

CVE-2024-24908

Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem...

CVE-2024-22460

Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...