PT-2025-31817 · Dell · Dell Powerprotect Data Domain

Published 2025-07-31 · Updated 2025-10-16 · CVE-2025-36594

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain versions 7.10.1.0 through 7.10.1.60 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.25

Description Dell PowerProtect Data Domain contains an authentication bypass vulnerability that allows an unauthenticated attacker with remote access to bypass protection mechanisms. This could lead to the creation of accounts, potentially exposing customer information and affecting system integrity and availability.

Recommendations For versions 7.7.1.0 through 8.3.0.15, update to a newer version. For versions 7.10.1.0 through 7.10.1.60, update to a newer version. For versions 7.13.1.0 through 7.13.1.25, update to a newer version.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

BDU:2025-09422

CVE-2025-36594

Affected Products

Dell Powerprotect Data Domain

References · 10

• https://dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-36594 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36594 · Security Note
• https://bdu.fstec.ru/vul/2025-09422 · Security Note
• https://twitter.com/CveFindCom/status/1952386584776441896 · Twitter Post
• https://t.me/cveNotify/138947 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1952397583072035174 · Twitter Post
• https://twitter.com/CVEnew/status/1952382562967458107 · Twitter Post
• https://twitter.com/cracbot/status/1954135630570463458 · Twitter Post
• https://twitter.com/offseq/status/1952542688621797727 · Twitter Post