CVE-2023-48668

dell powerprotect data domain management center

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-48668

Katalog CVE

CVSS 6.7 · Medium EPSS 0,46%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada dell powerprotect data domain management center. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.

Rincian

Terbit di NVD
14 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari)
0,46% peluang dieksploitasi; lebih tinggi dari 38,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell powerprotect data domain management center Semua versi sebelum 6.2.1.110
dell powerprotect data domain management center Versi 7.0 hingga sebelum 7.13.0.10
dell powerprotect data domain management center Versi 7.7 hingga sebelum 7.7.5.25
dell powerprotect data domain management center Versi 7.10 hingga sebelum 7.10.1.15

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.