CVE Feed

    Dashboard / CVE / CVE-2024-29173

    CVE-2024-29173

    Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery (SSRF) vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client.

    Published:Jun 26, 2024
    Last Modified:Feb 3, 2025
    EPS:Jun 26, 2024
    EPSS Score:0.0024
    CVSS Score:6.8

    Affected Products

    Vendor
    Dell
    Product
    Apex Protection Storage
    Vendor
    Dell
    Product
    Data Domain Operating System
    Vendor
    Dell
    Product
    Dd3300
    Vendor
    Dell
    Product
    Dd6400
    Vendor
    Dell
    Product
    Dd6900
    Vendor
    Dell
    Product
    Dd9400
    Vendor
    Dell
    Product
    Dd9410
    Vendor
    Dell
    Product
    Dd9900
    Vendor
    Dell
    Product
    Dd9910
    Vendor
    Dell
    Product
    Dm5500

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2024-48010 (CVSS 6.5) — Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access contro…
    CVE-2024-29176 (CVSS 8.8) — Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnera…
    CVE-2023-48667 (CVSS 7.2) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…
    CVE-2023-44286 (CVSS 8.8) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-base…
    CVE-2023-44285 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper…
    CVE-2023-44284 (CVSS 4.3) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Inj…
    CVE-2023-44279 (CVSS 6.7) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS com…
    CVE-2023-44278 (CVSS 6.7) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path tr…
    CVE-2023-44277 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High