CVE-2022-45102: Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially…

PriorityP430medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.47%

37.5th percentile

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
dell	data_protection_central	19.1 – 19.7	—
dell	dp4400_firmware	2.5 – 2.7	—
dell	dp5900_firmware	2.5 – 2.7	—
dell	emc_data_protection_central	>= 19.1 < 19.8	19.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.