7.8
Élevée
CVE-2025-30099 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the DDSH CLI. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerProtect Data Domain Feature Release 7.7 | 7.7.1.0 → 8.1.0.10 | Pas de correctif indiqué |
| PowerProtect Data Domain LTS2024 7.13 | 7.13.1.0 → 7.13.1.25 | Pas de correctif indiqué |
| PowerProtect Data Domain LTS 2023 7.10 | 7.10.1.0 → 7.10.1.50 | Pas de correctif indiqué |
Autres CVE de PowerProtect Data Domain Feature Release
Les 5 CVE de PowerProtect Data Domain Feature Release →
CVE-2025-30098
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Moyenne
CVE-2025-30097
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Moyenne
CVE-2025-30096
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
6.7
Moyenne
CVE-2025-36594
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…
9.8
Critique