OS Command Injection Vulnerability in Dell PowerProtect Data Domain
CVE-2025-43911
Key Information:
- Vendor
Dell
- Status
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Of Feature Release
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2025
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
- Vendor
- CVE Published:
- 7 October 2025
What is CVE-2025-43911?
The Dell PowerProtect Data Domain software, specifically within certain versions of the Data Domain Operating System, is susceptible to an OS command injection vulnerability. This flaw permits high-privileged local attackers to execute arbitrary commands, potentially leading to unauthorized privilege escalation to root. Organizations using the affected versions should prioritize mitigation strategies to safeguard their systems against exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.70
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.40
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3.1.0 < 8.3.1.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved