← Back

CVE-2025-43913

nvd nist
Published: Oct 7, 2025Modified: Oct 14, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic Algorithm vulnerability in the DDOS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

Affected (4)

1 product
Data Domain Operating System
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Dell
From 7.13.1.0 to 7.13.1.40
From 7.7.1.0 to 7.10.1.70
From 8.3.0.0 to 8.3.0.15
From 8.3.1.0 to 8.3.1.10

Timeline

No history available yet.