Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a vulnerability that exposes sensitive information to unauthorized actors. A low privileged attacker with remote access could exploit this vulnerability, potentially leading to information exposure. This issue affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-23777 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can send specially crafted requests to the affected system. If successful, this could allow the attacker to access sensitive information that should not be exposed. The attack does not require user interaction and can be executed over the network.
Affected Products
- Feature Release versions 7.7.1.0 through 8.5
- LTS2025 release version 8.3.1.0 through 8.3.1.20
- LTS2024 release versions 7.13.1.0 through 7.13.1.50
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Users should ensure that their systems are running the most recent versions of the Data Domain Operating System. Regularly monitoring for security advisories and implementing best practices for network security can also help reduce the risk of exploitation.