CVE-2025-43913: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Risky Cryptographic Algorithm vulnerability in the DDOS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43913?
CVE-2025-43913 has been rated as a high severity vulnerability due to its potential impact on system security.
How do I fix CVE-2025-43913?
To mitigate CVE-2025-43913, ensure to update Dell PowerProtect Data Domain to a version containing the security patches released by Dell.
What versions are affected by CVE-2025-43913?
CVE-2025-43913 affects Dell PowerProtect Data Domain versions from 7.7.1.0 to 8.3.0.15 and specific versions in the LTS 2025, 2024, and 2023 releases.
What are the potential risks associated with CVE-2025-43913?
Exploitation of CVE-2025-43913 could lead to unauthorized access and manipulation of data within the affected systems.
How can I determine if my system is vulnerable to CVE-2025-43913?
Check your Dell PowerProtect Data Domain software version against the listed affected versions to determine vulnerability to CVE-2025-43913.