Vulnerability Description
Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerprotect Data Domain Management Center | < 6.2.1.110 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologieVendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologieVendor Advisory
FAQ
What is CVE-2023-48668?
CVE-2023-48668 is a vulnerability with a CVSS score of 8.2 (HIGH). Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker...
How severe is CVE-2023-48668?
CVE-2023-48668 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-48668?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Powerprotect Data Domain Management Center.