DSA-2024-144: Dell Technologies PowerProtect DD Management Center Security Update for Multiple Security Vulnerabilities
Summary: Dell Technologies PowerProtect DD remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Details
| Third-Party Component |
CVEs |
More Information |
|---|---|---|
| curl |
CVE-2023-23916, CVE-2022-43552, CVE-2022-35252, CVE-2022-32221, CVE-2022-32208, CVE-2022-32207, CVE-2023-32001 |
See NVD link below for individual scores for each CVE. |
| libwebp7 |
CVE-2023-1999 |
See NVD link below for individual scores for each CVE. |
| libxml2 |
CVE-2023-29469, CVE-2023-28484, CVE-2022-40304, CVE-2022-40303 |
See NVD link below for individual scores for each CVE. |
| python-wheel |
CVE-2022-40898 |
See NVD link below for individual scores for each CVE. |
| cloud-init |
CVE-2023-1786 |
See NVD link below for individual scores for each CVE. |
Affected Products & Remediation
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center |
Versions 7.0 through 7.12 |
Version 7.13.0.10 or later |
|
| Dell PowerProtect DD Management Center |
PowerProtect DD Management Center LTS2023 7.10 |
Versions 7.10.1.0 through 7.10.1.15 |
Version 7.10.1.20 or later |
|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center LTS2022 7.7 |
Versions 7.7.5.0 through 7.7.5.25 |
Version 7.7.5.30 or later |
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center |
Versions 7.0 through 7.12 |
Version 7.13.0.10 or later |
|
| Dell PowerProtect DD Management Center |
PowerProtect DD Management Center LTS2023 7.10 |
Versions 7.10.1.0 through 7.10.1.15 |
Version 7.10.1.20 or later |
|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center LTS2022 7.7 |
Versions 7.7.5.0 through 7.7.5.25 |
Version 7.7.5.30 or later |
Note: PowerProtect DD Management Center (DDMC) can be upgraded independent of other types PowerProtect DD systems. To remediate the vulnerabilities mentioned in this DSA, customers can choose to only upgrade DDMC. More details can be found in the release notes.
For more details about DDOS versions available for download, see the links below (requires log in to Dell Support to view articles):
Please also see:
Revision History
|
Revision |
Date |
Description |
|---|---|---|
|
1.0 |
2024-03-19 |
Initial Release |
| 2.0 | 2024-03-21 | Updated "Affected Product" section under "Article Properties" |
Related Information
Legal Disclaimer
Affected Products
Data Domain, Data Domain, PowerProtect Data Domain Management CenterArticle Properties
Article Number: 000223302
Article Type: Dell Security Advisory
Last Modified: 21 Mar 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.