CVE-2023-44286

Dell PowerProtect DD is affected by a DOM-based Cross-Site Scripting vulnerability (CVE-2023-44286) in multiple versions: pre-7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110. The root cause is a DOM-based XSS that allows a remote unauthenticated attacker to inject malicious HTML/JavaScript ...

CVE-2023-44285

Dell PowerProtect DD is affected by an improper access control vulnerability that enables local privilege escalation by a low-privilege user. Affected software includes PowerProtect DD versions prior to 7.13.0.10, LTS releases prior to 7.7.5.25 and 7.10.1.15, and the 6.2.1.110 baseline. The issue...

CVE-2023-44277

Dell PowerProtect DD contains an OS command injection vulnerability in the CLI. A local, low-privileged attacker could execute arbitrary OS commands on the underlying OS with the vulnerable service’s privileges, potentially leading to a full system takeover. Affected versions include prior to 7.1...

CVE-2023-44279

Dell PowerProtect DD is affected by an OS command injection in the administrator CLI. The vulnerability impacts DD versions prior to 7.13.0.10, LTS versions prior to 7.7.5.25 and 7.10.1.15, and version 6.2.1.110. The underlying issue is the failure to properly filter construct command characters,...

CVE-2023-44284

Dell PowerProtect DD is affected by an SQL injection in versions prior to 7.13.0.10, with LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110 also impacted. The issue allows a remote, low-privilege attacker to cause the execution of SQL commands on the backend database, resulting in unauthorized read acce...

CVE-2023-48667

Dell PowerProtect DD is affected by an OS command injection vulnerability in the administrator CLI. A remote high-privilege attacker could execute arbitrary OS commands on the underlying OS, potentially taking over the system. Affected versions include pre-7.13.0.10, LTS pre-7.7.5.25, LTS pre-7.1...

CVE-2023-44278

Dell PowerProtect DD is affected by a path traversal vulnerability (CVE-2023-44278) affecting versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, and 6.2.1.110. The root cause is a path traversal flaw that could allow a local, highly privileged attacker to read and write OS files on the ser...