dell powerprotect data protection, dell apex protection storage, dell powerprotect data domain +2 lainnya
CVSS 7.8 · High EPSS 0,60%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada dell powerprotect data protection, dell apex protection storage +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| dell | powerprotect data protection | Semua versi sebelum 2.7.6 |
| dell | apex protection storage | Semua versi sebelum 6.2.1.110 |
| dell | apex protection storage | Versi 7.0 hingga sebelum 7.10.1.15 |
| dell | powerprotect data domain | Semua versi sebelum 6.2.1.110 |
| dell | powerprotect data domain | Versi 7.0 hingga sebelum 7.12.0.0 |
| dell | powerprotect data domain management center | Semua versi sebelum 6.2.1.110 |
| dell | powerprotect data domain management center | Versi 7.0 hingga sebelum 7.13.0.10 |
| dell | emc data domain os | Semua versi sebelum 6.2.1.110 |
| dell | emc data domain os | Versi 7.0 hingga sebelum 7.12.0.0 |
| dell | emc data domain os | Versi 7.7 hingga sebelum 7.7.5.25 |
| dell | emc data domain os | Versi 7.10 hingga sebelum 7.10.1.15 |
| dell | powerprotect data domain management center | Versi 7.7 hingga sebelum 7.7.5.25 |
| dell | powerprotect data domain management center | Versi 7.10 hingga sebelum 7.10.1.15 |