Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a vulnerability due to improper restriction of excessive authentication attempts. A high privileged attacker with remote access could exploit this vulnerability, potentially leading to unauthorized access. This issue affects versions 8.4 through 8.5 of the software.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-46606 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By repeatedly attempting to authenticate, the attacker can bypass security measures, ultimately gaining unauthorized access to sensitive data and system functionalities.
Affected Products
- PowerProtect Data Domain (Feature Release versions 8.4 through 8.5): Contains the vulnerability allowing excessive authentication attempts.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Additionally, implementing strong authentication mechanisms and monitoring for unusual access patterns can help reduce the risk of exploitation.