OS Command Injection Vulnerability in Dell PowerProtect Data Domain
CVE-2025-36566
6.7MEDIUM
Key Information:
What is CVE-2025-36566?
Dell PowerProtect Data Domain systems running specific versions of the Data Domain Operating System (DD OS) are susceptible to an OS Command Injection vulnerability. This issue could be exploited by an attacker with local access to execute arbitrary commands with high privileges. Successful exploitation may allow the attacker to elevate their privileges to root level, leading to significant security risks for the affected systems.
Affected Version(s)
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.60
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.30
PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release 7.7.1.0 < 8.3.0.10