PT-2025-41173 · Dell · Dell Powerprotect Data Domain

Published 2025-10-06 · Updated 2025-10-08 · CVE-2025-43727

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.1.0.10 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.25 Dell PowerProtect Data Domain versions 7.10.1.0 through 7.10.1.50

Description The Dell PowerProtect Data Domain software contains a flaw in its authentication algorithm implementation within the RestAPI. A remote, unauthenticated attacker could potentially gain unauthorized access. The affected component is the RestAPI.

Recommendations Update Dell PowerProtect Data Domain to a version later than 8.1.0.10. Update Dell PowerProtect Data Domain to a version later than 7.13.1.25. Update Dell PowerProtect Data Domain to a version later than 7.10.1.50.

Fix

Weakness Enumeration

CWE-303

Related Identifiers

BDU:2025-12864

CVE-2025-43727

Affected Products

Dell Powerprotect Data Domain

References · 7

• https://dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12864 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-43727 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43727 · Vendor Advisory
• https://twitter.com/ZeroPathLabs/status/1975982990418194450 · Twitter Post
• https://twitter.com/CVEnew/status/1975646575784268172 · Twitter Post
• https://t.me/CVEtracker/34365 · Telegram Post