CVE-2024-45759 — Dell / PowerProtect DD

Description (CNA)

Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of privilege vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to unauthorized execution of certain commands to overwrite system config of the application. Exploitation may lead to denial of service of system.

Affected (CNA)

Vendor / product	Versions
Dell / PowerProtect DD	affected 7.7.1 through 8.0.0.0; affected N/A before 7.13.1.10; affected N/A before 7.10.1.40; affected N/A before 7.7.5.50

CWE

CWE-266

References

https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.