CVE-2024-29174: Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could…

PriorityP423medium4.4CVSS 3.1

AVLACLPRLUINSUCLILAN

EPSS

0.20%

9.8th percentile

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	data_domain_operating_system	< 7.7.5.40	7.7.5.40
dell	data_domain_operating_system	>= 7.11.0.0 < 7.13.1.0	7.13.1.0
dell	data_domain_operating_system	>= 7.8.0.0 < 7.10.1.30	7.10.1.30
dell	powerprotect_dd	7.0 – 7.13	—
dell	powerprotect_dd	7.8 – 7.13	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.