Dell PowerProtect Data Domain Path Traversal Vulnerability Allowing Denial-of-Service and Unauthorized Access

A path traversal vulnerability has been identified in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) versions 7.7.1.0 prior to 8.3.0.15, as well as in LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability allows a high-privileged attacker with local access to exploit the system, potentially leading to a denial-of-service condition and unauthorized access.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition and unauthorized access to the system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain OS version 8.4.0.0 or later. For systems with Data Domain OS LTS2025, version 8.3.1.10 or later is recommended. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.