Dell PowerProtect Data Domain Authentication Algorithm Vulnerability in RestAPI

A vulnerability exists in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) versions 7.7.1.0 through 8.1.0.10, as well as LTS2024 release versions 7.13.1.0 through 7.13.1.25 and LTS2023 release versions 7.10.1.0 through 7.10.1.50. This vulnerability arises from an incorrect implementation of the authentication algorithm in the RestAPI, allowing an unauthenticated attacker with remote access to potentially exploit the issue and gain unauthorized access.

Impact

Exploitation of this vulnerability could lead to unauthorized access on the affected system.

Remediation

Users can upgrade to version 8.3.0.10 or later, version 7.13.1.30 or later, or version 7.10.1.60 or later. For instructions on how to upgrade, see the Dell Knowledge Base article 'How to Upgrade the Data Domain Operating System'.