CVE-2024-29174 MEDIUM

CVE-2024-29174

Vendor Dell
Product PowerProtect DD
Weakness CWE-89 · SQLi
Published June 26, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.

Key dates

02Disclosure timeline

June 26, 2024 CVE published
August 2, 2024 Record updated