Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.6

Dell PowerProtect Data Domain: Unsecured Remote Access

CVE-2025-46641 · published 6 months ago
Summary

The Dell PowerProtect Data Domain with Data Domain Operating System versions 8.4 through 8.5 may allow a skilled attacker with remote access to gain unauthorized access. This could happen if the attacker has a high level of privilege, which could lead to sensitive data being compromised. Dell recommends updating to a fixed version to prevent unauthorized access.

Original advisory text
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with...
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
6.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-287Improper Authentication
Timeline
Published17 Apr 2026
Updated4 Nov 2026
First seen17 Apr 2026
Sources
CVE-2025-46641 · NVD
Track software like this
Free during beta