Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6wpv-p9fj-fj39

Опубликовано: 07 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root.

EPSS

Процентиль: 10%
0.00035
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.7
nvd
4 месяца назад

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root.

CVSS3: 6.7
fstec
4 месяца назад

Уязвимость программного обеспечения централизованного управления системами хранения данных PowerProtect Data Domain Management Center операционных систем Dell EMC Data Domain Operating System (DD OS), связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 10%
0.00035
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78