CVE-2025-43891
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an use of a Broken or Risky Cryptographic Algorithm vulnerability in the Authentication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - security_alert@emc.com
- Published
- 2025-10-07
- Last modified
- 2025-10-07
- Weaknesses
- CWE-327
Affected products
- Data Domain Operating System (Dell)
- Powerprotect Data Domain With Data Domain Operating System Dd Os Lts2023 (Dell)
- Powerprotect Data Domain With Data Domain Operating System Dd Os Lts2024 (Dell)
- Powerprotect Data Domain With Data Domain Operating System Dd Os Lts2025 (Dell)
- Powerprotect Data Domain With Data Domain Operating System Dd Os Of Feature Release (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multi…