Dell PowerProtect Data Manager
Moderate fix1 remedy
cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 19.21.0-11
Dell PowerProtect Data Manager OS Command Injection Vulnerability in Hyper-V
Vulnerability
Patched
A command injection vulnerability has been identified in Dell PowerProtect Data Manager versions 19.19 and 19.20 for Hyper-V. This vulnerability arises from improper neutralization of special elements used in operating system commands, allowing a high-privileged attacker with local access to execute arbitrary commands.
Impact
Exploitation of this vulnerability could lead to unauthorized command execution on the affected system.
Remediation
Users can upgrade to Dell PowerProtect Data Manager version 19.21.0-11 or later to address this vulnerability.
Added: Sep 10, 2025, 4:32 PM
Updated: Sep 10, 2025, 4:32 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
10.0exploitability
3.0remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.