CVE Feed

    Dashboard / CVE / CVE-2023-44279

    CVE-2023-44279

    Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could potentially exploit this vulnerability, to bypass security restrictions. Exploitation may lead to a system take over by an attacker

    Published:Dec 14, 2023
    Last Modified:Nov 21, 2024
    EPS:Dec 14, 2023
    EPSS Score:0.0001
    CVSS Score:6.7

    Affected Products

    Vendor
    Dell
    Product
    Apex Protection Storage
    Vendor
    Dell
    Product
    Dd3300
    Vendor
    Dell
    Product
    Dd6400
    Vendor
    Dell
    Product
    Dd6900
    Vendor
    Dell
    Product
    Dd9400
    Vendor
    Dell
    Product
    Dd9900
    Vendor
    Dell
    Product
    Dp4400
    Vendor
    Dell
    Product
    Dp5900
    Vendor
    Dell
    Product
    Emc Data Domain Os
    Vendor
    Dell
    Product
    Powerprotect Data Domain
    Vendor
    Dell
    Product
    Powerprotect Data Domain Management Center
    Vendor
    Dell
    Product
    Powerprotect Data Protection

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-48010 (CVSS 6.5) — Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access contro…
    CVE-2024-29173 (CVSS 6.8) — Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side R…
    CVE-2024-29176 (CVSS 8.8) — Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnera…
    CVE-2023-48667 (CVSS 7.2) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…
    CVE-2023-44286 (CVSS 8.8) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-base…
    CVE-2023-44285 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper…
    CVE-2023-44284 (CVSS 4.3) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Inj…
    CVE-2023-44278 (CVSS 6.7) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path tr…
    CVE-2023-44277 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High