Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-29175 EUVD-2024-26208GHSA-j72h-72jr-j8pr

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerabilit…

Published Jun 26, 2024 · Updated Aug 2, 2024 · Assigned by dell

Description

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to man-in-the-middle attack that exposes sensitive session information.

Affected products

VendorProductAffectedFixed
Dell PowerProtect DD 7.0 – ≤ 7.13, N/A – < 2.7.7, N/A – < 5.16.0.0, 7.8 – ≤ 7.13 2.7.7

References