CVE-2026-46463
MEDIUM
6.5
CVSS 3.1
Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Metadata
Severity & Metrics
6.5
MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Dell | PowerProtect Data Domain | — | 0 < 8.8.0.0 or later, 0 < 8.6.1.20 or later, 0 < 8.3.1.40 or later, 0 < 7.13.1.80 or later |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-190 | cna | CWE-190: Integer Overflow or Wraparound |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 6.5 | MEDIUM | 3.1 | cna | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H |