Powerprotect Data Domain Virtual Edition
Monthly
Protection-mechanism bypass in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds a high-privileged (administrative) account to subvert the appliance's data-protection controls. Affected builds are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30 and LTS2026 8.6.1.0 through 8.6.1.10; the flaw is scored CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) with the PR:H metric confirming the administrative precondition, which sharply limits the realistic attacker set to insiders or adversaries who have already compromised privileged credentials. No public exploit code and no CISA KEV entry are associated with this CVE at time of analysis, and vendor patches are available, so this is a scheduled-patching item rather than an emergency.
Path traversal in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds administrative-level privileges to execute commands on the appliance. Affected releases are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10; the PR:H CVSS vector means unauthenticated and low-privileged users cannot reach the flaw. No public exploit was identified at time of analysis, and Dell has released fixed builds.
Protection-mechanism bypass in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds a high-privileged (administrative) account to subvert the appliance's data-protection controls. Affected builds are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30 and LTS2026 8.6.1.0 through 8.6.1.10; the flaw is scored CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) with the PR:H metric confirming the administrative precondition, which sharply limits the realistic attacker set to insiders or adversaries who have already compromised privileged credentials. No public exploit code and no CISA KEV entry are associated with this CVE at time of analysis, and vendor patches are available, so this is a scheduled-patching item rather than an emergency.
Path traversal in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds administrative-level privileges to execute commands on the appliance. Affected releases are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10; the PR:H CVSS vector means unauthenticated and low-privileged users cannot reach the flaw. No public exploit was identified at time of analysis, and Dell has released fixed builds.