CVE-2025-43913 PUBLISHED

Assigner: dell
Reserved: 19.04.2025 Published: 07.10.2025 Updated: 07.10.2025

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic Algorithm vulnerability in the DDOS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS Score: 5.3

Product Status

Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release
Versions Default: unaffected
  • affected from 7.7.1.0 to 8.4.0.0 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025
Versions Default: unaffected
  • affected from 8.3.1.0 to 8.3.1.10 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024
Versions Default: unaffected
  • affected from 7.13.1.0 to 7.13.1.40 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023
Versions Default: unaffected
  • affected from 7.10.1.0 to 7.10.1.70 (excl.)

References

Problem Types

  • CWE-327: Use of a Broken or Risky Cryptographic Algorithm CWE