Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a vulnerability related to the use of a broken or risky cryptographic algorithm in the DD boost. An unauthenticated attacker with remote access could exploit this vulnerability, potentially leading to information exposure. This affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.7 | CVE-2025-43909 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected system. Given the high attack complexity, the attacker would need to carefully craft their approach to bypass security measures. Once access is gained, the attacker could leverage the weak cryptographic algorithm to expose sensitive information.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
It is recommended to update the affected products to the latest versions that address this vulnerability. Regularly reviewing and applying security patches can help mitigate risks associated with cryptographic vulnerabilities. Additionally, implementing network security measures can help limit unauthorized access.