DSA-2023-346: Security Update for Dell Data Protection Central
Summary: Dell Data Protection Central remediation is available for SSH CBC vulnerability that could be exploited by local malicious user to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-4129 | Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext. | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N  |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-4129 | Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext. | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected Products & Remediation
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Data Protection Central | Version 19.9.0-10 | Version 19.9.0-12 | https://www.dell.com/support/home/product-support/product/data-protection-central/drivers |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Data Protection Central | Version 19.9.0-10 | Version 19.9.0-12 | https://www.dell.com/support/home/product-support/product/data-protection-central/drivers |
Platform: SUSE Linux Enterprise Server 12 SP5
See the latest ‘Dell Data Protection Central 19.9 Release Notes’ in Dell Data Protection Central 19.9 Release Notes | Dell US
IDPA customers are not affected.
See the latest ‘Dell Data Protection Central 19.9 Release Notes’ in Dell Data Protection Central 19.9 Release Notes | Dell US
IDPA customers are not affected.
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-09-27 | Initial Release |
Related Information
Legal Disclaimer
Affected Products
Data Protection CentralArticle Properties
Article Number: 000218045
Article Type: Dell Security Advisory
Last Modified: 19 Sep 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.