Dell PowerProtect Data Domain vulnerabilities

A vulnerability in Dell PowerProtect Data Domain allows unauthorized command execution by a local attacker with high privileges due to incorrect authorization.

Dell PowerProtect Data Domain in multiple versions contains an improper link resolution before file access vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

A vulnerability in Dell PowerProtect Data Domain allows insertion of sensitive information into log files. A low-privileged attacker with local access could exploit this to expose confidential data.

Dell PowerProtect Data Domain in multiple versions contains an improper link resolution before file access vulnerability. It allows a high privileged attacker with local access to gain unauthorized access to the system.

Dell PowerProtect Data Domain systems in multiple versions are vulnerable due to incorrect permission assignment for a critical resource. A high-privileged attacker with local access could exploit this to gain unauthorized access.

Dell PowerProtect Data Domain in multiple versions contains a path traversal vulnerability due to improper limitation of a pathname to a restricted directory. This allows a high-privileged attacker with local access to potentially expose sensitive information.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70 contain an improper access control vulnerability in RBAC. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high privileged attacker with remote access could exploit this flaw to execute arbitrary commands.

Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability. A high privileged attacker with local access could exploit it to elevate privileges to perform an unauthorized delete operation.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6, LTS2025 8.3.1.0 through 8.3.1.20, and LTS2024 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high-privileged attacker with local access could exploit it to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain versions 8.5 through 8.6 contain an OS command injection vulnerability due to improper neutralization of special elements. A high-privileged attacker with remote access could exploit it to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain versions 8.5 through 8.6 contain a command injection vulnerability. A high-privileged attacker with remote access could exploit it to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit it for unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6.0.0, 8.7.0.0, LTS2025 8.3.1.0 through 8.3.1.20, LTS2024 7.13.1.0 through 7.13.1.60 contain an improper neutralization of argument delimiters in a command ('argument injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could exploit this vulnerability, leading to arbitrary command execution with root privileges.

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could exploit this vulnerability, leading to arbitrary command execution with root privileges.

An OS command injection vulnerability in Dell PowerProtect Data Domain. A high privileged attacker with local access can exploit it to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain with DD OS contains an OS Command Injection vulnerability due to improper neutralization of special elements. A high-privileged attacker with local access could execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain with DD OS contains an OS Command Injection vulnerability. A high-privileged attacker with local access could execute arbitrary commands, potentially leading to privilege escalation to root.

Dell PowerProtect Data Domain with DD OS contains an OS Command Injection vulnerability. A high-privileged attacker with local access could execute arbitrary commands, potentially leading to privilege escalation to root.

Dell PowerProtect Data Domain with DD OS contains an argument injection vulnerability. A high-privileged attacker with local access could exploit this to execute arbitrary commands and escalate privileges to root.

Dell PowerProtect Data Domain with DD OS in Feature Release versions 7.7.1.0 through 8.4, LTS2024 7.13.1.0 through 7.13.1.30, and LTS 2023 7.10.1.0 through 7.10.1.60 contains a path traversal vulnerability in the UI. An unauthenticated attacker with remote access could exploit it, leading to information exposure.