DSA-2022-302: Dell Technologies PowerProtect DD Security Update for Multiple Third-Party Security Vulnerabilities

Shrnutí: Dell Technologies PowerProtect DD remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

Tento článek se vztahuje na Tento článek se nevztahuje na Tento článek není vázán na žádný konkrétní produkt. V tomto článku nejsou uvedeny všechny verze produktu.

Vliv

Critical

Podrobnosti

Společnost Dell Technologies všem zákazníkům doporučuje vzít v úvahu základní hodnocení CVSS i všechna související hodnocení v daném čase a prostředí, která mohou mít vliv na potenciální závažnost dané konkrétní bezpečnostní hrozby.

Dotčené produkty a náprava

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2022-0778, CVE-2021-21131, CVE-2021-21136, CVE-2022-21166 PowerProtect DD Appliance model: DD3300, DD6400, and DD6900, DD9400, and DD9900 7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
For more details about DDOS versions available for download, see the links below (requires log in to Dell Support to view articles):
Dell KB article 81247: Data Domain: DD OS Software Versions
Dell KB article 14125: Data Domain Operating System Software Portal Availability Policy
LTS 7.7.1 to 7.7.3 7.7.4 and later
CVE-2021-0154, CVE-2021-0153, CVE-2021-33123, CVE-2021-0190, CVE-2021-33124, CVE-2021-0155, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166 PowerProtect DD Appliance model:
DD6300, DD6800, and DD9300
7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.3 7.7.4 and later
CVE-2022-2068, CVE-2022-1292 PowerProtect DD
DDOS and DDMC
7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.3 7.7.4 and later
PowerProtect DD Appliance model:
DD2200 and DD2500
6.2.1.80 and below 6.2.1.100 and above
Integrated DataProtect Appliance model: DP4400 2.7.2 and 2.7.3   Available in next release
CVE-2022-2068, CVE-2022-1292, CVE-2018-25032, CVE-2022-23308, CVE-2022-27782, CVE-2022-27776, CVE-2019-14250 PowerProtect DD
SmartScale
7.8 to 7.9 7.10.0.0 and later
CVE-2021-29425 PowerProtect DD
DDOS and DDMC
 7.0 to 7.9  7.10.0.0 and later
or
7.7.5 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.4 7.7.5 and later
PowerProtect DD Appliance model:
DD2200 and DD2500
6.2.1.80 and earlier 6.2.1.100 and above
Integrated DataProtect Appliance model: DP4400 2.7.2 and 2.7.3 Available in next release

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2022-0778, CVE-2021-21131, CVE-2021-21136, CVE-2022-21166 PowerProtect DD Appliance model: DD3300, DD6400, and DD6900, DD9400, and DD9900 7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
For more details about DDOS versions available for download, see the links below (requires log in to Dell Support to view articles):
Dell KB article 81247: Data Domain: DD OS Software Versions
Dell KB article 14125: Data Domain Operating System Software Portal Availability Policy
LTS 7.7.1 to 7.7.3 7.7.4 and later
CVE-2021-0154, CVE-2021-0153, CVE-2021-33123, CVE-2021-0190, CVE-2021-33124, CVE-2021-0155, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166 PowerProtect DD Appliance model:
DD6300, DD6800, and DD9300
7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.3 7.7.4 and later
CVE-2022-2068, CVE-2022-1292 PowerProtect DD
DDOS and DDMC
7.0 to 7.9 7.10.0.0 and later
or
7.7.4 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.3 7.7.4 and later
PowerProtect DD Appliance model:
DD2200 and DD2500
6.2.1.80 and below 6.2.1.100 and above
Integrated DataProtect Appliance model: DP4400 2.7.2 and 2.7.3   Available in next release
CVE-2022-2068, CVE-2022-1292, CVE-2018-25032, CVE-2022-23308, CVE-2022-27782, CVE-2022-27776, CVE-2019-14250 PowerProtect DD
SmartScale
7.8 to 7.9 7.10.0.0 and later
CVE-2021-29425 PowerProtect DD
DDOS and DDMC
 7.0 to 7.9  7.10.0.0 and later
or
7.7.5 and later to stay on LTS 7.7
LTS 7.7.1 to 7.7.4 7.7.5 and later
PowerProtect DD Appliance model:
DD2200 and DD2500
6.2.1.80 and earlier 6.2.1.100 and above
Integrated DataProtect Appliance model: DP4400 2.7.2 and 2.7.3 Available in next release

Historie změn

RevisionDateDescription
1.02023-01-04Initial Release
1.12023-06-14Updated Affected Products and Remediation for PowerProtect DD DDOS and DDMC , changed Next 7.7 release after 7.7.4 to stay on LTS to 7.7.5 and later to stay on LTS 7.7 and changed Available in next release to 7.7.5 and later.
1.22023-08-08Updated Affected Products and Remediation for Affected version 6.2.1.80 and below.  Added updated version. 

Související informace

Dotčené produkty

Data Domain, PowerProtect Data Protection Appliance, Data Domain, Data Domain Boost, Data Domain Boost – File System, Data Domain Boost - Open Storage, Data Domain Deduplication Storage Systems, Data Domain Encryption, Data Domain Extended Retention , Data Domain GDA, Data Domain NDMP Tape Server, Data Domain Replicator, Data Domain Retention Lock, Data Domain Storage Migration, Data Domain Virtual Tape Library, Data Domain Virtual Tape Library for IBM I/OS, Data Domain Virtual Edition, PowerProtect Data Domain Management Center, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, PowerProtect Data Protection Hardware, Integrated Data Protection Appliance Software, Product Security Information, Storage Direct for Data Domain ...
Vlastnosti článku
Číslo článku: 000207174
Typ článku: Dell Security Advisory
Poslední úprava: 19 zář 2025
Najděte odpovědi na své otázky od ostatních uživatelů společnosti Dell
Služby podpory
Zkontrolujte, zda se na vaše zařízení vztahují služby podpory.