OS Command Injection Vulnerability in Dell PowerProtect Data Domain
CVE-2025-43911
Key Information:
- Vendor
Dell
- Status
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Of Feature Release
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2025
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
- Dell Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
- Vendor
- CVE Published:
- 7 October 2025
What is CVE-2025-43911?
The Dell PowerProtect Data Domain software, specifically within certain versions of the Data Domain Operating System, is susceptible to an OS command injection vulnerability. This flaw permits high-privileged local attackers to execute arbitrary commands, potentially leading to unauthorized privilege escalation to root. Organizations using the affected versions should prioritize mitigation strategies to safeguard their systems against exploitation.
Affected Version(s)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.70
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.40
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3.1.0 < 8.3.1.10