PT-2024-22779 · Dell · Dell Powerprotect Dd

Published 2024-06-26 · Updated 2024-06-26 · CVE-2024-29173

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40

Description A Server-Side Request Forgery (SSRF) issue exists, allowing a remote high privileged attacker to potentially exploit it and lead to disclosure of information on the application or remote client.

Recommendations For Dell PowerProtect DD versions prior to 8.0, update to version 8.0 or later. For Dell PowerProtect DD LTS 7.13.1.0, update to a version that includes the fix for this issue. For Dell PowerProtect DD LTS 7.10.1.30, update to a version that includes the fix for this issue. For Dell PowerProtect DD LTS 7.7.5.40, update to a version that includes the fix for this issue.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-29173

Affected Products

Dell Powerprotect Dd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-29173 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29173 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-multiple-security-vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/84438 · Telegram Post