Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain contains an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-24505 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By sending specially crafted input that bypasses the input validation checks, the attacker can execute arbitrary commands with root privileges, potentially compromising the entire system.
Affected Products
- PowerProtect Data Domain versions 8.5 through 8.6: These versions are vulnerable due to improper input validation, allowing for potential command execution by high privileged attackers.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Dell. It is also recommended to limit remote access to the system and monitor for any suspicious activity that may indicate an attempted exploitation.