CVE-2025-43909: High severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic Algorithm vulnerability in the DD boost. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43909?
CVE-2025-43909 has a critical severity rating due to its potential impact on data integrity and system security.
How do I fix CVE-2025-43909?
To fix CVE-2025-43909, apply the recommended security updates as outlined in the official Dell advisory.
What versions of Dell PowerProtect Data Domain are affected by CVE-2025-43909?
CVE-2025-43909 affects Dell PowerProtect Data Domain versions from 7.7.1.0 to 8.3.0.15, and several LTS versions including 7.10.x and 7.13.x.
What type of vulnerability is CVE-2025-43909?
CVE-2025-43909 is categorized as an 'Use of a Broken or Risky Cryptographic Algorithm' vulnerability.
Are there any mitigation strategies for CVE-2025-43909?
Mitigation strategies for CVE-2025-43909 include ensuring encryption protocols are robust and limiting access to vulnerable systems until updates are applied.