7.6
High
CVE-2024-28974 Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability
Description
Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Protection Advisor 19.5 | 19.5 → 19.9 | No fix stated |
| PowerProtect DP Series Appliance (IDPA) 2.7 | earliest → 2.7.6 | No fix stated |
| emc_powerprotect_data_protection_appliance 2.7 | earliest → 2.7.6 | No fix stated |
| emc_data_protection_advisor 19.5 | 19.5 → 19.9 | No fix stated |
Other CVEs of Data Protection Advisor
The 7 CVEs of Data Protection Advisor →
CVE-2025-46699
Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a…
4.3
Medium
CVE-2022-33935
Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could…
5.4
Medium
CVE-2020-5351
Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that…
7.5
High
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability
8.8
High