CVE-2025-43934 PUBLISHED

Assigner: dell
Reserved: 20.04.2025 Published: 07.10.2025 Updated: 07.10.2025

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Unauthorized access.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CVSS Score: 6

Product Status

Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release
Versions Default: unaffected
  • affected from 7.7.1.0 to 8.4.0.0 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025
Versions Default: unaffected
  • affected from 8.3.1.0 to 8.3.1.10 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024
Versions Default: unaffected
  • affected from 7.13.1.0 to 7.13.1.40 (excl.)
Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023
Versions Default: unaffected
  • affected from 7.10.1.0 to 7.10.1.70 (excl.)

References

Problem Types

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE