CVE-2024-29176

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

0.64%

Published

Jun 26, 2024

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (14)

dell · data_domain_operating_system (up to 7.7.5.40)vulnerable

dell · data_domain_operating_system (up to 7.10.1.30)vulnerable

dell · data_domain_operating_system (up to 7.13.1.0)vulnerable

dell · apex_protection_storage

dell · dd3300

dell · dd6400

dell · dd6900

dell · dd9400

dell · dd9410

dell · dd9900

dell · dd9910

dell · data_domain_operating_system (up to 5.16.0.0)vulnerable

dell · dm5500

References (2)

https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs