PT-2026-33427 · Dell · Powerprotect Data Domain Boostfs

Published 2026-04-17 · Updated 2026-04-17 · CVE-2025-36568

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain BoostFS for client Feature Release versions 7.7.1.0 through 8.5 Dell PowerProtect Data Domain BoostFS for client LTS2025 release versions 8.3.1.0 through 8.3.1.20 Dell PowerProtect Data Domain BoostFS for client LTS2024 release versions 7.13.1.0 through 7.13.1.50

Description An issue exists where credentials are insufficiently protected. A low privileged attacker with local access could exploit this to cause credential exposure, potentially allowing them to access the system using the privileges of the compromised account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-36568

Affected Products

Powerprotect Data Domain Boostfs

References · 4

• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36568 · Security Note
• https://twitter.com/CVEnew/status/2045102594796732479 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045109552966688931 · Twitter Post