Dell PowerProtect Data Domain Improper Authentication Vulnerability Allowing Unauthorized Access

A vulnerability has been identified in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) Feature Release versions 8.4 through 8.5. This vulnerability arises from improper authentication, potentially allowing a high-privileged attacker with remote access to exploit it and gain unauthorized access to the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access on the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.6.1.10, 8.7.0.0 or later. For instructions on how to upgrade, see the Dell PowerProtect Data Domain Upgrade Guide. After upgrading, some security scanners may still report false positive findings. For more details, refer to the Dell PowerProtect Data Domain False Positive Security Vulnerabilities Knowledge Base articles.