CVE-2023-48668

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerability in an admin operation. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the managed system application's underlying OS with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker on a managed system of DDMC.

• CWE-78
• CWE-78

• https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilitiesVendor Advisory

Published

Dec 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48661 Dell vApp Manager, versions prior to 9.2.4.x contain an arb…4.9
• CVE-2023-48662 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48663 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48664 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48665 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48667 Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.…7.2
• CVE-2023-4867A vulnerability was found in Xintian Smart Table Integrated …8.8
• CVE-2023-48670 Dell SupportAssist for Home PCs version 3.14.1 and prior ve…7.8
• CVE-2023-48671 Dell vApp Manager, versions prior to 9.2.4.x contain an inf…7.5
• CVE-2023-48674Dell Platform BIOS contains an Improper Null Termination vul…4.9
• CVE-2023-48676Sensitive information disclosure and manipulation due to mis…7.1
• CVE-2023-48677Local privilege escalation due to DLL hijacking vulnerabilit…7.8