Orta CVSS 6.7
CVE-2026-26951: Powerprotect Dp Series Appliance: yığıt (stack) taşması
Açıklama (NVD)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Özet bilgiler
- Ürün
- Dell Powerprotect Dp Series Appliance
- CVSS v3.1
- 6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,13 (yüzdelik 3)
- CWE
- CWE-121
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dell-powerprotect-dp-series-appliance | — | — | 2.7.9 |
| dell-data-domain-operating-system | 7.7.1.0 | — | 7.13.1.70 |
| dell-data-domain-operating-system | 8.3.1.0 | — | 8.3.1.30 |
| dell-data-domain-operating-system | 8.4.0.0 | — | 8.6.1.0 |