Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. This could result in significant security risks for affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.6 | CVE-2025-46607 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By leveraging the improper authentication flaw, the attacker can gain unauthorized access, potentially compromising sensitive data and system integrity.
Affected Products
- PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5: Vulnerable to improper authentication, allowing high privileged attackers to gain unauthorized access.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Regularly review and update access controls to limit remote access and ensure that only authorized users have high privileges.