Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-354w-98cq-w4fj

Опубликовано: 14 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.

EPSS

Процентиль: 11%
0.00038
Низкий

8.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.2
nvd
около 2 лет назад

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.

CVSS3: 8.2
fstec
около 2 лет назад

Уязвимость программного обеспечения централизованного управления системами хранения данных Dell Technologies PowerProtect Data Domain Management Center, позволяющая нарушителю выполнить произвольные команды ОС

EPSS

Процентиль: 11%
0.00038
Низкий

8.2 High

CVSS3

Дефекты

CWE-78