Skip to content
Sign in
8.8 High

CVE-2025-29987 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an…

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges.

Affected products and versions

Product Affected versions Fixed in
DD OS 8.3 7.7 7.7.1.0 → 8.3.0.10 No fix stated
DD OS 7.13 7.13 7.13.1.0 → 7.13.1.20 No fix stated
DD OS 7.10 7.10 7.10.1.0 → 7.10.1.50 No fix stated
PowerProtect DP Series Appliance (IDPA) 2.7 earliest → < 2.7.8 2.7.8
Track this CVE