Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure. This affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-43907 |
Exploitation
To exploit this vulnerability, an attacker must have low-level privileges and remote access to the affected system. By manipulating file paths, the attacker can traverse directories and access sensitive information that should be restricted. This can be done without user interaction, making it easier for attackers to exploit the vulnerability.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of the Data Domain Operating System. Regularly applying security updates and patches can help protect against potential exploits. Additionally, restricting remote access and monitoring for unusual activity can further enhance security.