PT-2025-41141 · Dell · Dell Powerprotect Data Domain Boostfs For Linux

Published 2025-10-07 · Updated 2026-02-12 · CVE-2025-43914

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain BoostFS for Linux versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain BoostFS for Linux version 8.3.1.0 Dell PowerProtect Data Domain BoostFS for Linux versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain BoostFS for Linux versions 7.10.1.0 through 7.10.1.60

Description The software contains an Incorrect Privilege Assignment issue. A local attacker with low privileges could potentially exploit this, resulting in Unauthorized access.

Recommendations Update to a version later than 8.3.0.15. Update to a version later than 8.3.1.0. Update to a version later than 7.13.1.30. Update to a version later than 7.10.1.60.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2025-12860

CVE-2025-43914

Affected Products

Dell Powerprotect Data Domain Boostfs For Linux

References · 7

• https://bdu.fstec.ru/vul/2025-12860 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43914 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43914 · Security Note
• https://twitter.com/CVEnew/status/1975627648538751001 · Twitter Post
• https://t.me/cveNotify/151846 · Telegram Post
• https://t.me/CVEtracker/34351 · Telegram Post