Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain contains an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. This issue affects multiple versions of the product.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-24504 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By sending specially crafted input to the system, the attacker can bypass input validation checks, allowing them to execute arbitrary commands with root privileges. This could lead to a complete compromise of the affected system.
Affected Products
- PowerProtect Data Domain versions 7.7.1.0 through 8.6
- LTS2025 release version 8.3.1.0 through 8.3.1.20
- LTS2024 release versions 7.13.1.0 through 7.13.1.60
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Dell. It is essential to regularly check for updates and ensure that all affected versions of PowerProtect Data Domain are patched to prevent potential exploitation.