Dell PowerProtect Data Domain Improper Restriction of Excessive Authentication Attempts Vulnerability

A vulnerability exists in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) Feature Release versions 8.4 through 8.5. This vulnerability allows high privileged attackers with remote access to exploit improper restrictions on authentication attempts, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could result in unauthorized access to the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS versions 8.6.1.10, 8.7.0.0 or later. For instructions on how to upgrade, see the Dell PowerProtect Data Domain Upgrade Guide. After upgrading, some security scanners may still report false positive findings. For more details, refer to the respective False Positive KB articles.