CVE-2025-43910

Published: Oct 7, 2025Modified: Oct 14, 2025

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Stack-based Buffer Overflow vulnerability in the DDSH CLI. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.

Affected (4)

Products: Dell: Data Domain Operating System

Dell

1 product

Data Domain Operating System

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Data Domain Operating System	From 7.13.1.0 to 7.13.1.40
Dell Data Domain Operating System	From 7.7.1.0 to 7.10.1.70
Dell Data Domain Operating System	From 8.3.0.0 to 8.3.0.15
Dell Data Domain Operating System	From 8.3.1.0 to 8.3.1.10

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.