Description
Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.
Scores
CVSS v3
8.1
EPSS
0.0007
EPSS Percentile
21.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-121
CWE-787
Status
published
Products (6)
dell/data_domain_operating_system
7.7.1.0 - 7.13.1.60
Dell/PowerProtect Data Domain
< 2.7.9 with DD OS 8.3.1.30
Dell/PowerProtect Data Domain
< 7.13.1.60 or later
Dell/PowerProtect Data Domain
< 8.3.1.20 or later
Dell/PowerProtect Data Domain
< 8.6.1.10, 8.7.0.0 or later
dell/powerprotect_dp_series_appliance
< 2.7.9
Published
Apr 22, 2026
Tracked Since
Apr 23, 2026