CVE-2023-44284 MEDIUM

CVE-2023-44284

Vendor Dell
Product PowerProtect DD
Weakness CWE-89 · SQLi
Published December 14, 2023
Last update November 21, 2024

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized read access to application data.

Key dates

02Disclosure timeline

December 14, 2023 CVE published
November 21, 2024 Record updated