Dell PowerProtect Data Domain Vulnerability: Local Privilege Escalation Risk
CVE-2024-45759

7.3HIGH

Key Information:

Vendor
Dell
Status
Powerprotect Dd
Vendor
CVE Published:
8 November 2024

Summary

The vulnerability in Dell PowerProtect Data Domain prior to version 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50 allows local low privileged attackers to exploit the system. By executing certain commands, attackers may overwrite system configuration, which can disrupt its functionalities, leading to potential denial of service. This highlights a significant risk to the security and integrity of the affected products.

Affected Version(s)

PowerProtect DD 7.7.1 <= 8.0.0.0

PowerProtect DD < 7.13.1.10

PowerProtect DD < 7.10.1.40

References

https://www.dell.com/support/kbdoc/en-us/000245360/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.