CVE-2025-46645: OS Command Injection
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS 2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46645?
CVE-2025-46645 is classified as a high severity vulnerability affecting specific versions of Dell PowerProtect Data Domain.
How do I fix CVE-2025-46645?
To remediate CVE-2025-46645, update your Dell PowerProtect Data Domain to a version that is not affected by this vulnerability.
What versions of Dell PowerProtect Data Domain are affected by CVE-2025-46645?
CVE-2025-46645 affects Dell PowerProtect Data Domain versions from 7.7.1.0 to 8.4.0.0 and specific LTS releases.
What kind of vulnerability is CVE-2025-46645?
CVE-2025-46645 is characterized as an improper neutralization issue that can lead to security breaches.
Is there a specific patch for CVE-2025-46645?
Yes, Dell has released security updates addressing CVE-2025-46645 that should be applied as part of regular maintenance.