Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r2v-4fp3-8g3h

Опубликовано: 04 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system integrity and availability.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system integrity and availability.

EPSS

Процентиль: 36%
0.00152
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 9.8
nvd
14 дней назад

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system integrity and availability.

CVSS3: 9.8
fstec
18 дней назад

Уязвимость операционных систем Dell EMC Data Domain Operating System (DD OS), связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю обойти существующие ограничения безопасности и оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 36%
0.00152
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-290