PT-2025-2955 · Dell · Dell Powerprotect Dd

Zzcentury · Published 2025-02-01 · Updated 2025-03-02 · CVE-2024-53296

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect DD versions prior to 7.10.1.50 Dell PowerProtect DD versions prior to 7.13.1.20

Description The issue is related to a Stack-based Buffer Overflow vulnerability in the RestAPI of Dell PowerProtect DD. This could be exploited by an attacker with high privileges and remote access, potentially leading to a Denial of Service.

Recommendations For versions prior to 7.10.1.50, update to version 7.10.1.50 or later. For versions prior to 7.13.1.20, update to version 7.13.1.20 or later. As a temporary workaround, consider restricting access to the RestAPI to minimize the risk of exploitation.

Fix

DoS

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2024-53296

Affected Products

Dell Powerprotect Dd

References · 6

• https://dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53296 · Security Note
• https://osv.dev/vulnerability/CVE-2024-53296 · Vendor Advisory
• https://t.me/cvedetector/16999 · Telegram Post
• https://twitter.com/CVEnew/status/1885542588893036562 · Twitter Post
• https://twitter.com/taqtics_ai/status/1895994241840484679 · Twitter Post