Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a vulnerability related to the use of a broken or risky cryptographic algorithm. An unauthenticated attacker with remote access could exploit this vulnerability, potentially leading to information disclosure. This could enable attackers to conduct phishing attacks that result in users revealing sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-43913 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected system. By leveraging the weak cryptographic algorithm, the attacker can potentially intercept or manipulate data, leading to unauthorized access to sensitive information. User interaction is required, making phishing attacks a viable method for exploitation.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
To mitigate this vulnerability, it is recommended to update the affected products to the latest versions that address the cryptographic weaknesses. Regularly monitoring for security updates and applying them promptly can help protect against potential exploitation.