CVE-2023-44285: Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious…

PriorityP340high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.22%

12.5th percentile

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
dell	apex_protection_storage	< 6.2.1.110	6.2.1.110
dell	apex_protection_storage	>= 7.0 < 7.10.1.15	7.10.1.15
dell	emc_data_domain_os	< 6.2.1.110	6.2.1.110
dell	emc_data_domain_os	>= 7.0 < 7.12.0.0	7.12.0.0
dell	emc_data_domain_os	>= 7.10 < 7.10.1.15	7.10.1.15
dell	emc_data_domain_os	>= 7.7 < 7.7.5.25	7.7.5.25
dell	powerprotect_data_domain	< 6.2.1.110	6.2.1.110
dell	powerprotect_data_domain	>= 7.0 < 7.12.0.0	7.12.0.0
dell	powerprotect_data_domain_management_center	< 6.2.1.110	6.2.1.110
dell	powerprotect_data_domain_management_center	>= 7.0 < 7.13.0.10	7.13.0.10
dell	powerprotect_data_domain_management_center	>= 7.10 < 7.10.1.15	7.10.1.15
dell	powerprotect_data_domain_management_center	>= 7.7 < 7.7.5.25	7.7.5.25
dell	powerprotect_data_protection	< 2.7.6	2.7.6
dell	powerprotect_dd	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.