Description
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell PowerProtect Data Domain
Default version status: unaffected
0 to < 8.6.1.10, 8.7.0.0 or lateraffected0 to < 2.7.9 with DD OS 8.3.1.30affected