Dell PowerProtect Data Domain Improper Authentication Vulnerability Allowing Unauthorized Access

An improper authentication vulnerability has been identified in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) Feature Release versions 8.4 through 8.5. This vulnerability allows a high-privileged attacker with remote access to exploit the issue, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could result in unauthorized access to the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS versions 8.6.1.10, 8.7.0.0 or later. For instructions on how to upgrade, see the Dell PowerProtect Data Domain Upgrade Guide. After upgrading, some security scanners may still report false positive findings. For more details, refer to the respective False Positive KB articles.