PT-2026-1807 · Dell · Dell Powerprotect Data Domain Lts2024+3

Published 2025-02-12 · Updated 2026-02-05 · CVE-2025-46676

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.4.0.0 Dell PowerProtect Data Domain LTS2025 release version 8.3.1.10 Dell PowerProtect Data Domain LTS2024 release versions 7.13.1.0 through 7.13.1.40 Dell PowerProtect Data Domain LTS 2023 release versions 7.10.1.0 through 7.10.1.70

Description Dell PowerProtect Data Domain systems are affected by an issue that could allow an attacker with high privileges and remote access to disclose sensitive information. The issue involves an Exposure of Sensitive Information to an Unauthorized Actor.

Recommendations Update Dell PowerProtect Data Domain versions prior to 8.4.0.0. Update Dell PowerProtect Data Domain LTS2025 release version prior to 8.3.1.10. Update Dell PowerProtect Data Domain LTS2024 release versions prior to 7.13.1.40. Update Dell PowerProtect Data Domain LTS 2023 release versions prior to 7.10.1.70.

Fix

Information Disclosure

Allocation of Resources Without Limits

Weakness Enumeration

CWE-200

CWE-770

Related Identifiers

BDU:2026-03386

CVE-2025-46676

Affected Products

Dell Powerprotect Data Domain

Dell Powerprotect Data Domain Lts 2023

Dell Powerprotect Data Domain Lts2024

Dell Powerprotect Data Domain Lts2025

References · 13

• https://bdu.fstec.ru/vul/2026-03386 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46676 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000405813/dsa-2025-415-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-46676 · Vendor Advisory
• https://github.com/latchset/kdcproxy/pull/68 · Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://twitter.com/CVEnew/status/2009663201101627586 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-46676 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-python-kdcproxy-cve-2025-59089-7.3 · Note
• https://t.me/cveNotify/150978 · Telegram Post
• https://access.redhat.com/security/cve/cve-2025-46676 · Note