PT-2025-41155 · Dell · Dell Powerprotect Data Domain Lts2025+3
CVE-2025-43891
·
Publicado
2025-10-07
·
Atualizado
2025-10-07
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15
Dell PowerProtect Data Domain LTS2025 version 8.3.1.0
Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.30
Dell PowerProtect Data Domain LTS 2023 versions 7.10.1.0 through 7.10.1.60
Description
The software contains a flaw related to the use of a Broken or Risky Cryptographic Algorithm within the Authentication process. A remote, unauthenticated attacker could potentially exploit this issue, resulting in Information disclosure.
Recommendations
Update Dell PowerProtect Data Domain versions to a release later than 8.3.0.15.
Update Dell PowerProtect Data Domain LTS2025 to a version later than 8.3.1.0.
Update Dell PowerProtect Data Domain LTS2024 to a release later than 7.13.1.30.
Update Dell PowerProtect Data Domain LTS 2023 to a version later than 7.10.1.60.
Correção
Use of a Broken Cryptographic Algorithm
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dell Powerprotect Data Domain
Dell Powerprotect Data Domain Lts 2023
Dell Powerprotect Data Domain Lts2024
Dell Powerprotect Data Domain Lts2025