CVEvulnerability

CVE-2024-29175

5.9 MEDIUM Published 2024-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-327

Description

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to man-in-the-middle attack that exposes sensitive session information.

Affected configurations

• dell data domain operating system (< 7.7.5.40) • dell data domain operating system (>= 7.8.0.0 < 7.10.1.30) • dell data domain operating system (>= 7.11.0.0 < 7.13.1.0)

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References