PT-2025-41155 · Dell · Dell Powerprotect Data Domain Lts2025+3

CVE-2025-43891

·

Publicado

2025-10-07

·

Atualizado

2025-10-07

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain LTS2025 version 8.3.1.0 Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS 2023 versions 7.10.1.0 through 7.10.1.60
Description The software contains a flaw related to the use of a Broken or Risky Cryptographic Algorithm within the Authentication process. A remote, unauthenticated attacker could potentially exploit this issue, resulting in Information disclosure.
Recommendations Update Dell PowerProtect Data Domain versions to a release later than 8.3.0.15. Update Dell PowerProtect Data Domain LTS2025 to a version later than 8.3.1.0. Update Dell PowerProtect Data Domain LTS2024 to a release later than 7.13.1.30. Update Dell PowerProtect Data Domain LTS 2023 to a version later than 7.10.1.60.

Correção

Use of a Broken Cryptographic Algorithm

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-12855
CVE-2025-43891

Produtos afetados

Dell Powerprotect Data Domain
Dell Powerprotect Data Domain Lts 2023
Dell Powerprotect Data Domain Lts2024
Dell Powerprotect Data Domain Lts2025