Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
Dell PowerProtect Data Domain Management Center, across several feature and long-term support releases, contains an SQL injection flaw that lets a low-privileged remote attacker manipulate database queries. Successful exploitation could allow unauthorized access to the systems managed by the affected Management Center.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems.
Affected versions
- Dell PowerProtect Data Domain Management Center
Version range not reported