VYPR
High severity7.2NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-48667

CVE-2023-48667

Description

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS to bypass security restriction. Exploitation may lead to a system take over by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • cpe:2.3:a:dell:apex_protection_storage:*:*:*:*:*:*:*:*
    Range: <6.2.1.110
  • cpe:2.3:a:dell:powerprotect_data_domain:*:*:*:*:virtual:*:*:*
    Range: <6.2.1.110
  • cpe:2.3:a:dell:powerprotect_data_domain_management_center:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:dell:powerprotect_data_domain_management_center:*:*:*:*:*:*:*:*range: <6.2.1.110
    • cpe:2.3:o:dell:powerprotect_data_domain_management_center:*:*:*:*:lts2022:*:*:*range: >=7.7,<7.7.5.25
    • cpe:2.3:o:dell:powerprotect_data_domain_management_center:*:*:*:*:lts2023:*:*:*range: >=7.10,<7.10.1.15
  • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:*range: <6.2.1.110
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts2022:*:*:*range: >=7.7,<7.7.5.25
    • cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts2023:*:*:*range: >=7.10,<7.10.1.15
  • cpe:2.3:a:dell:powerprotect_data_protection:*:*:*:*:*:*:*:*
    Range: <2.7.6
  • Dell/PowerProtect DDllm-fuzzy2 versions
    <7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110+ 1 more
    • (no CPE)range: <7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110
    • (no CPE)range: Versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.