Stack-based Buffer Overflow in Dell PowerProtect Data Domain
CVE-2025-43910

2.3LOW

What is CVE-2025-43910?

Dell PowerProtect Data Domain systems running specific versions of the Data Domain Operating System are susceptible to a stack-based buffer overflow vulnerability. This vulnerability affects high privileged attackers who have local access to the affected systems, potentially allowing them to exploit the vulnerability to trigger a Denial of Service. The affected versions span several releases, underlining the importance for users to patch their systems promptly to mitigate potential risks.

Affected Version(s)

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.70

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.40

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3.1.0 < 8.3.1.10

References

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-43910 : Stack-based Buffer Overflow in Dell PowerProtect Data Domain