Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a use of weak credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to the system. This issue affects multiple feature release versions and could have serious implications for data security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-23853 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. Once access is gained, the attacker can utilize weak credentials to bypass authentication mechanisms, allowing them to gain unauthorized access to sensitive data and system functionalities.
Affected Products
- Feature Release versions 7.7.1.0 through 8.5
- LTS2025 release version 8.3.1.0 through 8.3.1.20
- LTS2024 release versions 7.13.1.0 through 7.13.1.50
Mitigation
To mitigate this vulnerability, it is recommended to update the affected systems to the latest versions that address the weak credentials issue. Regularly reviewing and strengthening authentication mechanisms can also help prevent unauthorized access.