Skip to content
Sign in
9.8 Critical

CVE-2025-36594 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through…

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system integrity and availability.

Affected products and versions

Product Affected versions Fixed in
PowerProtect Data Domain Feature Release 7.7 7.7.1.0 → 8.3.0.15 No fix stated
PowerProtect Data Domain LTS2024 7.13 7.13.1.0 → 7.13.1.25 No fix stated
PowerProtect Data Domain LTS 2023 7.10 7.10.1.0 → 7.10.1.60 No fix stated

Other CVEs of PowerProtect Data Domain Feature Release

The 5 CVEs of PowerProtect Data Domain Feature Release →
CVE-2025-30099 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through… 7.8 High CVE-2025-30098 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through… 6.7 Medium CVE-2025-30097 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through… 6.7 Medium CVE-2025-30096 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through… 6.7 Medium
Track this CVE