EUVD-2026-66670
GHSA-h8fq-887p-fmch
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
MitM network positioning required justifies AC:H; no authentication to the product needed (PR:N); impact limited to confidentiality interception with no integrity or availability effect.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
AnalysisAI
Improper certificate validation in Dell PowerProtect One versions 20.1.0.0 and below allows a network-positioned, unauthenticated attacker to bypass TLS protection mechanisms and intercept sensitive data in transit. The flaw (CWE-295) means the product fails to adequately authenticate remote endpoints during TLS handshake, enabling man-in-the-middle interception of backup or management communications. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to achieve man-in-the-middle network positioning between the Dell PowerProtect One instance and a remote TLS endpoint - this prerequisite is captured in the CVSS AC:H metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 5.9 (Medium) accurately reflects a constrained but meaningful threat: AV:N confirms remote reachability, but AC:H captures the prerequisite of network man-in-the-middle positioning - an operational barrier that reduces opportunistic exploitation risk substantially. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has achieved network adjacency - through ARP spoofing, DNS poisoning, or a compromised intermediate device - intercepts a TLS session initiated by Dell PowerProtect One to a backup target or remote service. The attacker presents an attacker-controlled certificate; because the product fails to properly validate the certificate chain, it accepts the connection and the attacker decrypts the session, potentially harvesting credentials, backup metadata, or sensitive configuration data. … |
| Remediation | Consult Dell Security Advisory DSA-2026-369 at https://www.dell.com/support/kbdoc/en-us/000500902/dsa-2026-369-security-update-for-dell-powerprotect-one-multiple-vulnerabilities for the specific patched version and upgrade path. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerprotect One
View allOS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to exe
Stack-based buffer overflow in Dell PowerProtect One versions 20.1.0.0 and below enables unauthenticated remote attacker
Authorization bypass in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to man
Cache poisoning in Dell PowerProtect One versions 20.1.0.0 and below exposes environments to integrity violations via an
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today