dell apex protection storage, dell powerprotect data domain, dell powerprotect data domain management center +2 lainnya
CVSS 7.2 · High EPSS 1,8%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada dell apex protection storage, dell powerprotect data domain +3 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD.
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS to bypass security restriction. Exploitation may lead to a system take over by an attacker.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| dell | apex protection storage | Semua versi sebelum 6.2.1.110 |
| dell | apex protection storage | Versi 7.0 hingga sebelum 7.10.1.15 |
| dell | powerprotect data domain | Semua versi sebelum 6.2.1.110 |
| dell | powerprotect data domain | Versi 7.0 hingga sebelum 7.12.0.0 |
| dell | powerprotect data domain management center | Semua versi sebelum 6.2.1.110 |
| dell | powerprotect data domain management center | Versi 7.0 hingga sebelum 7.13.0.10 |
| dell | emc data domain os | Semua versi sebelum 6.2.1.110 |
| dell | emc data domain os | Versi 7.0 hingga sebelum 7.12.0.0 |
| dell | emc data domain os | Versi 7.7 hingga sebelum 7.7.5.25 |
| dell | emc data domain os | Versi 7.10 hingga sebelum 7.10.1.15 |
| dell | powerprotect data domain management center | Versi 7.7 hingga sebelum 7.7.5.25 |
| dell | powerprotect data domain management center | Versi 7.10 hingga sebelum 7.10.1.15 |
| dell | powerprotect data protection | Semua versi sebelum 2.7.6 |