VULNERABILITY INTELLIGENCE

CVE-2023-44278

CVSS score6.7 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2023-12-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application.

Weakness classification

  • security_alert@emc.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references