Dell EMC PowerProtect Data Manager
The Dell Software Vulnerability
On Dell’s Support Knowledge Base Security Advisory portal, a software vulnerability report named ‘DSA-2021-181: Dell EMC PowerProtect Data Manager Update for Multiple Security Vulnerabilities‘ was released on September 27th, 2021. Noted on the page is the following information; “Dell EMC PowerProtect Data Manager remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected systems.“
Technical Details
Below is a comprehensive list that includes the affected files (third-party components) as well as their respective CVE ID vulnerability codes;
Vulnerable Software Versions
Dell EMC PowerProtect Data Manager 19.8 and prior are at risk from the software weaknesses.
Important User Information
Dell Support has officially stated that fixes and remediation measures are available for the vulnerable versions of Dell EMC PowerProtect Data Manager. Users should upgrade as soon as possible to the secure version that is Dell EMC PowerProtect Manager 19.9. To update, Dell states that users must contact customer support.