Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | DD OS 8.3 | 7.7.1.0 – ≤ 8.3.0.10 | — |
| Dell | DD OS 7.13 | 7.13.1.0 – ≤ 7.13.1.20 | — |
| Dell | DD OS 7.10 | 7.10.1.0 – ≤ 7.10.1.50 | — |
| Dell | PowerProtect DP Series Appliance (IDPA) | N/A – < 2.7.8 | 2.7.8 |
Advisories 1
- WID-SEC-2025-0687 Dell PowerProtect Data Domain: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Apr 2, 2025