Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:07
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. |
08 Feb 2023, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dell
Dell emc Data Domain Os |
|
| CPE | cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:-:*:*:* cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:* cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-78 | |
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000201296/dsa-2022-187-dell-technologies-powerprotect-data-domain-security-update-for-multiple-third-party-component-vulnerabilities - Vendor Advisory |
01 Feb 2023, 13:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-01 13:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-23692
Mitre link : CVE-2023-23692
CVE.ORG link : CVE-2023-23692
JSON object : View
Products Affected
dell
- emc_data_domain_os
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')