← Back

CVE-2025-43727

nvd nist
Published: Oct 7, 2025Modified: Oct 14, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: security_alert@emc.com (Secondary)

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm vulnerability in the RestAPI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected (3)

Dell
1 product
Data Domain Operating System
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Data Domain Operating System
From 7.13.1.0 to 7.13.1.30
Data Domain Operating System
From 7.7.1.0 to 7.10.1.60
Data Domain Operating System
From 8.0.0.0 to 8.3.0.10

Related CWEs

CWE-303
Incorrect Implementation of Authentication Algorithm
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.