PowerProtect Data Domain EUVD-2026-42244

Exploitation requires high-privilege authentication (PR:H per CVSS vector) - the attacker must possess or obtain administrator-level credentials on the Dell PowerProtect Data Domain system before the traversal can be triggered. Remote network access to the management or data-path interface is required (AV:N). No user interaction is needed once authenticated (UI:N), and attack complexity is low (AC:L), meaning no race conditions or special timing is required. The primary limiting factor is the high-privilege prerequisite, which confines the realistic attacker population to insiders, credential-compromised administrators, or attackers who have already achieved significant access. There is no indication that a non-default configuration is required; the flaw appears present in the default deployment of affected versions. The scope is unchanged (S:U), so exploitation cannot pivot to other system components beyond the Data Domain appliance itself.

The aggregated risk signals consistently indicate a low-priority issue. CVSS scores this at 2.7 (Low), driven primarily by the PR:H requirement - only already-high-privileged attackers (e.g., administrators) can exploit this, which significantly reduces the realistic attacker population. The integrity impact is rated Low (I:L), meaning only partial or limited file modification is achievable, not arbitrary overwrite of critical system binaries. There is no confidentiality impact (C:N) and no availability impact (A:N), limiting the blast radius. No EPSS data was provided in the intelligence input, so exploitation probability cannot be quantified. KEV status is not listed, and no POC has been identified, both supporting the low-urgency posture. The primary concern would be a scenario where an already-compromised high-privilege account leverages this flaw to laterally modify configuration or data files beyond their intended scope - a secondary persistence mechanism rather than an initial access vector. This vulnerability is a real security issue but represents a low operational priority compared to unauthenticated or low-privilege network vulnerabilities in the same advisory batch.

An attacker who has obtained high-privilege credentials - whether through credential theft, insider threat, or prior compromise of an admin account - authenticates to the Dell PowerProtect Data Domain management interface over the network and submits a crafted request containing path traversal sequences. The appliance fails to sanitize the pathname, allowing the attacker to write or modify a file outside the intended restricted directory, potentially altering configuration files or stored metadata. No public exploit code exists at time of analysis, and exploiting this as an initial access vector is not possible.