Vulnerability Details CVE-2024-29173
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery (SSRF) vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.9%
CVSS Severity
CVSS v3 Score 6.8
References
- https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities
Products affected by CVE-2024-29173
-
cpe:2.3:a:dell:apex_protection_storage:-
-
cpe:2.3:h:dell:dd3300:-
-
cpe:2.3:h:dell:dd6400:-
-
cpe:2.3:h:dell:dd6900:-
-
cpe:2.3:h:dell:dd9400:-
-
cpe:2.3:h:dell:dd9410:-
-
cpe:2.3:h:dell:dd9900:-
-
cpe:2.3:h:dell:dd9910:-
-
cpe:2.3:h:dell:dm5500:-
-
cpe:2.3:o:dell:data_domain_operating_system:-
-
cpe:2.3:o:dell:data_domain_operating_system:7.0
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.0
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.30
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.40
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.50
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.60
-
cpe:2.3:o:dell:data_domain_operating_system:7.10.1.70
-
cpe:2.3:o:dell:data_domain_operating_system:7.11.0.0
-
cpe:2.3:o:dell:data_domain_operating_system:7.13
-
cpe:2.3:o:dell:data_domain_operating_system:7.7.1.0
-
cpe:2.3:o:dell:data_domain_operating_system:7.7.5.40
-
cpe:2.3:o:dell:data_domain_operating_system:7.7.5.50
-
cpe:2.3:o:dell:data_domain_operating_system:7.8.0.0