CVE-2025-30098: OS Command Injection
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the DDSH CLI. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30098?
CVE-2025-30098 is classified as a high severity vulnerability due to improper neutralization of special elements.
How do I fix CVE-2025-30098?
To address CVE-2025-30098, it is recommended to update your Dell PowerProtect Data Domain to a secure version as specified by the vendor.
What products are affected by CVE-2025-30098?
CVE-2025-30098 affects Dell PowerProtect Data Domain running DD OS versions from 7.7.1.0 to 8.1.0.10 and several LTS releases.
Can CVE-2025-30098 be exploited remotely?
Yes, CVE-2025-30098 can potentially be exploited remotely if the vulnerable system is accessible over the network.
What are the potential impacts of CVE-2025-30098?
The impact of CVE-2025-30098 may include unauthorized access to sensitive data or disruption of service on the affected systems.