Article Number: 000223302
DSA-2024-144: Dell Technologies PowerProtect DD Management Center Security Update for Multiple Security Vulnerabilities
Summary: Dell Technologies PowerProtect DD remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Article Content
Impact
Critical
Details
| Third-Party Component |
CVEs |
More Information |
|---|---|---|
| curl |
CVE-2023-23916, CVE-2022-43552, CVE-2022-35252, CVE-2022-32221, CVE-2022-32208, CVE-2022-32207, CVE-2023-32001 |
See NVD link below for individual scores for each CVE. |
| libwebp7 |
CVE-2023-1999 |
See NVD link below for individual scores for each CVE. |
| libxml2 |
CVE-2023-29469, CVE-2023-28484, CVE-2022-40304, CVE-2022-40303 |
See NVD link below for individual scores for each CVE. |
| python-wheel |
CVE-2022-40898 |
See NVD link below for individual scores for each CVE. |
| cloud-init |
CVE-2023-1786 |
See NVD link below for individual scores for each CVE. |
Affected Products and Remediation
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center |
Versions 7.0 through 7.12 |
Version 7.13.0.10 or later |
|
| Dell PowerProtect DD Management Center |
PowerProtect DD Management Center LTS2023 7.10 |
Versions 7.10.1.0 through 7.10.1.15 |
Version 7.10.1.20 or later |
|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center LTS2022 7.7 |
Versions 7.7.5.0 through 7.7.5.25 |
Version 7.7.5.30 or later |
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center |
Versions 7.0 through 7.12 |
Version 7.13.0.10 or later |
|
| Dell PowerProtect DD Management Center |
PowerProtect DD Management Center LTS2023 7.10 |
Versions 7.10.1.0 through 7.10.1.15 |
Version 7.10.1.20 or later |
|
| Dell PowerProtect DD Management Center |
Dell PowerProtect DD Management Center LTS2022 7.7 |
Versions 7.7.5.0 through 7.7.5.25 |
Version 7.7.5.30 or later |
Note: PowerProtect DD Management Center (DDMC) can be upgraded independent of other types PowerProtect DD systems. To remediate the vulnerabilities mentioned in this DSA, customers can choose to only upgrade DDMC. More details can be found in the release notes.
For more details about DDOS versions available for download, see the links below (requires log in to Dell Support to view articles):
Please also see:
Revision History
|
Revision |
Date |
Description |
|---|---|---|
|
1.0 |
2024-03-19 |
Initial Release |
| 2.0 | 2024-03-21 | Updated "Affected Product" section under "Article Properties" |
Related Information
Legal Information
Article Properties
Affected Product
Data Domain, Data Domain, PowerProtect Data Domain Management Center
Last Published Date
21 Mar 2024
Version
2
Article Type
Dell Security Advisory