Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. This issue affects versions 8.4 through 8.5 of the software.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.6 | CVE-2025-46641 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By leveraging the improper authentication flaw, the attacker can gain unauthorized access to sensitive data and potentially manipulate or disrupt the system’s operations.
Affected Products
- PowerProtect Data Domain (Feature Release versions 8.4 through 8.5): Contains an improper authentication vulnerability that could allow unauthorized access by high privileged attackers.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Regularly review and update access controls to ensure that only authorized users have high privileges. Monitoring system logs for unusual access patterns can also help in identifying potential exploitation attempts.