Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm vulnerability in the RestAPI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
References
Configurations
Configuration 1 (hide)
|
History
14 Oct 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:* | |
| First Time |
Dell
Dell data Domain Operating System |
|
| References | () https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities - Vendor Advisory |
07 Oct 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-07 20:15
Updated : 2025-10-14 20:16
NVD link : CVE-2025-43727
Mitre link : CVE-2025-43727
CVE.ORG link : CVE-2025-43727
JSON object : View
Products Affected
dell
- data_domain_operating_system
CWE
CWE-303
Incorrect Implementation of Authentication Algorithm