4.9

CVE-2024-29173

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery (SSRF) vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to disclosure of information on the application or remote client.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Data Domain Operating System Version >= 7.0 <= 7.13
   Dell ≫ Apex Protection Storage Version - SwEdition in-cloud
   Dell ≫ Apex Protection Storage Version - SwEdition on-premises
   Dell ≫ Dd3300 Version -
   Dell ≫ Dd6400 Version -
   Dell ≫ Dd6900 Version -
   Dell ≫ Dd9400 Version -
   Dell ≫ Dd9410 Version -
   Dell ≫ Dd9900 Version -
   Dell ≫ Dd9910 Version -
Dell ≫ Data Domain Operating System Version < 5.16.0.0
   Dell ≫ Dm5500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.266
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EMC 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities
Vendor Advisory