VYPR
High severity7.8NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-44277

CVE-2023-44277

Description

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Dell/PowerProtect DDllm-fuzzy2 versions
    <7.13.0.10, <LTS 7.7.5.25, <LTS 7.10.1.15, <6.2.1.110+ 1 more
    • (no CPE)range: <7.13.0.10, <LTS 7.7.5.25, <LTS 7.10.1.15, <6.2.1.110
    • (no CPE)range: Versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.