Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-46645

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 8.5.0.0, 8.3.1.20, 7.13.1.50, 7.10.1.80
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS 2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release

    From 7.7.1.0 · fixed in 8.5.0.0

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025

    From 8.3.1.0 · fixed in 8.3.1.20

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS 2024

    From 7.13.1.0 · fixed in 7.13.1.50

  • Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023

    From 7.10.1.0 · fixed in 7.10.1.80

References 1

dell.com