DSA-2026-369: Security Update for Dell PowerProtect One Multiple Vulnerabilities
Resumo: Dell PowerProtect One remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Este artigo aplica-se a
Este artigo não se aplica a
Este artigo não está vinculado a nenhum produto específico.
Nem todas as versões do produto estão identificadas neste artigo.
Impacto
High
Dados
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-68861 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution. |
8.8 |
|
|
CVE-2026-74770 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. |
8.8 |
|
|
CVE-2026-68863 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.5 |
|
|
CVE-2026-68857 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
6.5 |
|
|
CVE-2026-74771 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering. |
6.5 |
|
|
CVE-2026-74774 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
5.9 |
|
|
CVE-2026-67275 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning. |
5.3 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-68861 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution. |
8.8 |
|
|
CVE-2026-74770 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. |
8.8 |
|
|
CVE-2026-68863 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.5 |
|
|
CVE-2026-68857 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
6.5 |
|
|
CVE-2026-74771 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering. |
6.5 |
|
|
CVE-2026-74774 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
5.9 |
|
|
CVE-2026-67275 |
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning. |
5.3 |
Produtos afetados e soluções
|
CVEs Addressed |
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2026-68861, CVE-2026-74770, CVE-2026-68863, CVE-2026-68857, CVE-2026-74771, CVE-2026-74774, CVE-2026-67275 |
Dell PowerProtect One |
Software |
Versions 20.1.0.0 and prior |
Version 20.3.0.0 |
|
CVEs Addressed |
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2026-68861, CVE-2026-74770, CVE-2026-68863, CVE-2026-68857, CVE-2026-74771, CVE-2026-74774, CVE-2026-67275 |
Dell PowerProtect One |
Software |
Versions 20.1.0.0 and prior |
Version 20.3.0.0 |
Histórico de revisão
|
Revision |
Date |
Description |
|
1.0 |
2026-08-24 |
Initial Release |
|
2.0 |
2026-08-25 |
CVE Description updated |
Informações relacionadas
Aviso de isenção legal
Produtos afetados
PowerProtect Data Manager Appliance, Integrated Data Protection Appliance Family, PowerProtect One DM5510, PowerProtect One DM5510 SoftwarePropriedades do artigo
Número do artigo: 000500902
Tipo de artigo: Dell Security Advisory
Último modificado: 25 ago. 2026
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.