Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a Stack-based Buffer Overflow vulnerability in the DDSH CLI. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. This issue affects multiple feature release versions and could compromise system availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.3 | CVE-2025-43910 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can manipulate the DDSH CLI to trigger a stack-based buffer overflow. This could result in a Denial of service, impacting the availability of the affected system. Proper access control measures should be in place to prevent unauthorized access.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Additionally, restricting local access to the system and implementing strong access controls can help prevent exploitation. Regular monitoring and auditing of system access can further enhance security.