Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-43909

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releas

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 8.4.0.0, 8.3.1.10, 7.13.1.40, 7.10.1.70
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic Algorithm vulnerability in the DD boost. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release

    From 7.7.1.0 · fixed in 8.4.0.0

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025

    From 8.3.1.0 · fixed in 8.3.1.10

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024

    From 7.13.1.0 · fixed in 7.13.1.40

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023

    From 7.10.1.0 · fixed in 7.10.1.70

References 1

dell.com