Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. This affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-43912 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected system. By sending specially crafted requests, the attacker can trigger the heap-based buffer overflow, which may lead to a Denial of service condition. The low attack complexity means that this can be executed without significant effort.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of the Data Domain Operating System. Regularly applying security updates and patches can help protect against potential exploits. Additionally, restricting remote access to the affected systems can reduce the risk of exploitation.