OS Command Injection Vulnerability in Dell PowerProtect Data Domain
CVE-2025-36569
Key Information:
What is CVE-2025-36569?
The Dell PowerProtect Data Domain systems running specific versions of the Data Domain Operating System are susceptible to an OS Command Injection vulnerability. This flaw arises from an improper neutralization of special elements, allowing a high-privileged attacker with local access to execute arbitrary OS commands with root privileges. Organizations utilizing the affected versions should prioritize updating their systems to mitigate potential exploitation.
Affected Version(s)
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.60
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.30
PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release 7.7.1.0 < 8.3.0.10