CNNVD-202510-893 Information
CNNVD ID
CNNVD-202510-893
Related CVE
- CNNVD Published: 2025-10-07
Description (Chinese)
Dell PowerProtect Data Domain（Dell PowerProtect DD）是美国戴尔（Dell）公司的一套用于数据保护、备份、存储和重复数据消除的硬件设备。 Dell PowerProtect Data Domain存在操作系统命令注入漏洞，该漏洞源于操作系统命令中特殊元素中和不当，可能导致任意命令执行和权限提升。以下版本受到影响：7.7.1.0版本至8.1.0.10版本、7.13.1.0版本至7.13.1.25版本和7.10.1.0版本至7.10.1.50版本。
Description (English)
Dell PowerProtec Data Domain (Dell PowerProtec DD) is a set of hardware equipment for data protection, backup, storage and duplicate data elimination from Dell, United States. Dell PowerProtec Data Domain has an operational system command leak, which stems from the incompetence of special elements in the operating system command, which may result in arbitrary command execution and enhanced authority. The following versions were affected: 7.7.1.0 to 8.1.010, 7.13.1.0 to 7.1.125 and 7.10.1.0 to 7.10.1.50.
Hazard Level
High
Vulnerability Type
操作系统命令注入
Affected Vendor
戴尔
Published
2025-10-07
Last Modified
2026-02-24