Product:
PowerProtect Data Manager
Summary
Dell PowerProtect Data Manager, versions prior to 19.22, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service of a Dell Enterprise Support connection.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.3 | CVE-2026-22268 |
Exploitation
To exploit this vulnerability, an attacker with low privileges must gain remote access to the affected system. Once access is obtained, the attacker can manipulate the privilege assignments, potentially leading to a denial of service for the Dell Enterprise Support connection.
Affected Products
- PowerProtect Data Manager: Versions prior to 19.22 are affected by the Incorrect Privilege Assignment vulnerability.
Mitigation
It is recommended to update Dell PowerProtect Data Manager to version 19.22 or later to mitigate this vulnerability. Regularly applying security updates and monitoring access controls can also help prevent exploitation.