PT-2025-41149 · Dell · Dell Powerprotect Data Domain Lts2024+3

CVE-2025-43907

·

Published

2025-10-07

·

Updated

2025-10-07

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.3.0.15 Dell PowerProtect Data Domain LTS2025 version 8.3.1.0 Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS2023 versions 7.10.1.0 through 7.10.1.60
Description The software contains a Path Traversal issue where the sequence '.../...//' can be used. A remote attacker with low privileges could potentially exploit this, resulting in Information exposure.
Recommendations Update to a version later than 8.3.0.15. Update to a version later than 8.3.1.0. Update to a version later than 7.13.1.30. Update to a version later than 7.10.1.60.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-12874
CVE-2025-43907

Affected Products

Dell Powerprotect Data Domain
Dell Powerprotect Data Domain Lts2023
Dell Powerprotect Data Domain Lts2024
Dell Powerprotect Data Domain Lts2025