Dell PowerProtect Data Domain with Data Domain Operating System (DD...

5.3 CVSS

Vulnerability Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4, LTS2024 release Versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-43889

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

More from Dell

View All →

CVE-2025-46699

Dell Data Protection Advisor, versions prior to 19.12, contains an...

Medium 4.3

CVE-2025-46696

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s)...

Medium 6.4

CVE-2025-46691

Dell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains...

High 7.8

CVE-2025-46685

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a...

High 7.5

CVE-2025-46684

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a...

Medium 6.6

Affected Vendor

Dell

View all reports →

Affected Software

PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023

Vulnerable Versions:

7.7.1.0, 7.13.1.0, 7.10.1.0