Use of Insecure Cryptographic Algorithm in Dell PowerProtect Data Domain
CVE-2025-43913

5.3MEDIUM

Key Information:

Vendor

Dell
Status
Powerprotect Data Domain With Data Domain Operating System (dd Os) Of Feature Release
Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2025
Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
Vendor
CVE Published:
7 October 2025

What is CVE-2025-43913?

The Dell PowerProtect Data Domain, operating on several versions of the DD OS, is affected by a vulnerability involving the use of an insecure cryptographic algorithm. This flaw enables unauthenticated attackers with remote access to potentially exploit the system, leading to information disclosure. Such exploitation may facilitate phishing attacks, where attackers trick users into revealing sensitive information, thus posing significant risks to the security and integrity of data managed by affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.70

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.40

PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3.1.0 < 8.3.1.10

References

https://www.dell.com/support/kbdoc/en-us/000376224/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.