← Back

CVE-2024-53295

nvd nist
Published: Feb 1, 2025Modified: Feb 7, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege.

Affected (3)

Dell
1 product
Data Domain Operating System
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Data Domain Operating System
From 7.10.1.0 to 7.10.1.50
Data Domain Operating System
From 7.13.1.0 to 7.13.1.20
Data Domain Operating System
From 7.14.0.0 to 8.3.0.0

Related CWEs

CWE-1220
Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.