Dell PowerProtect Data Domain Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Command Execution

A stack-based buffer overflow vulnerability has been identified in Dell PowerProtect Data Domain appliances running Domain Operating System (DD OS) Feature Release versions 7.7.1.0 through 8.6, LTS2025 release versions 8.3.1.0 through 8.3.1.10, and LTS2024 release versions 7.13.1.0 through 7.13.1.60. This vulnerability allows an unauthenticated attacker with remote access to execute arbitrary commands on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized arbitrary command execution on the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.6.1.10, 8.7.0.0 or later, or version 7.13.1.70 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.