CVE-2024-37138: Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high…

PriorityP433medium6.8CVSS 3.1

AVNACLPRHUINSCCHINAN

EPSS

0.40%

31.9th percentile

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the application sending over an unauthorized file to the managed system.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	data_domain_operating_system	< 7.7.5.40	7.7.5.40
dell	data_domain_operating_system	>= 7.11.0.0 < 7.13.1.0	7.13.1.0
dell	data_domain_operating_system	>= 7.8.0.0 < 7.10.1.30	7.10.1.30
dell	powerprotect_dd	7.0 – 7.13	—
dell	powerprotect_dd	7.8 – 7.13	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.