CVE Feed

    Dashboard / CVE / CVE-2024-48010

    CVE-2024-48010

    Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to escalation of privilege on the application.

    Published:Nov 8, 2024
    Last Modified:Nov 26, 2024
    EPS:Nov 8, 2024
    EPSS Score:0.00157
    CVSS Score:6.5

    Affected Products

    Vendor
    Dell
    Product
    Apex Protection Storage
    Vendor
    Dell
    Product
    Data Domain Operating System
    Vendor
    Dell
    Product
    Emc Data Domain Os
    Vendor
    Dell
    Product
    Powerprotect Data Domain
    Vendor
    Dell
    Product
    Powerprotect Data Domain Management Center

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2024-29173 (CVSS 6.8) — Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side R…
    CVE-2024-29176 (CVSS 8.8) — Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnera…
    CVE-2023-48667 (CVSS 7.2) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…
    CVE-2023-44286 (CVSS 8.8) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-base…
    CVE-2023-44285 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper…
    CVE-2023-44284 (CVSS 4.3) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Inj…
    CVE-2023-44279 (CVSS 6.7) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS com…
    CVE-2023-44278 (CVSS 6.7) — Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path tr…
    CVE-2023-44277 (CVSS 7.8) — Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS comma…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High