CVE-2024-37138 — Relative Path Traversal in Dell Data Domain Operating System

CWE-23 — Relative Path Traversal3 documents3 sources
Severity
6.8MEDIUMNVD
CNA4.1
EPSS
0.2%
top 54.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell Data Domain Operating SystemDell Powerprotect DD
Timeline
PublishedJun 26

Description

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the application sending over an unauthorized file to the managed system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NExploitability: 2.3 | Impact: 4.0

Affected Packages2 packages

▶NVDdell/data_domain_operating_system7.8.0.0 — 7.10.1.30+2
▶CVEListV5dell/powerprotect_dd7.0 — 7.13+1

🔴Vulnerability Details

2
GHSA
GHSA-9rxx-ff39-wwfv: Dell PowerProtect DD, versions prior to 8↗2024-06-26
▶
CVEList
CVE-2024-37138: Dell PowerProtect DD, versions prior to 8↗2024-06-26
▶
CVE-2024-37138 — Relative Path Traversal in Dell | cvebase