Dell Emc Data Domain OS vulnerabilities

12 CVEs affecting Dell Emc Data Domain OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48667, published 2023-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0912, published 2016-06-19. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role…
CVE-2023-48667, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could…
CVE-2023-23692, published 2023-02-01. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of…
CVE-2016-0911, published 2016-06-19. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root…
CVE-2016-8216, published 2017-02-03. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain…
CVE-2023-44286, published 2023-12-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially…
CVE-2023-44279, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could…
CVE-2023-44277, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially…
CVE-2023-44284, published 2023-12-14. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this…
CVE-2017-4983, published 2017-05-04. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected…

Latest

CVE-2023-44285, published 2023-12-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could…
CVE-2023-44278, published 2023-12-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this…