CNNVD-202510-890 Information

CNNVD ID

CNNVD-202510-890

CVE-2025-43727

  • CNNVD Published: 2025-10-07

Description (Chinese)

Dell PowerProtect Data Domain(Dell PowerProtect DD)是美国戴尔(Dell)公司的一套用于数据保护、备份、存储和重复数据消除的硬件设备。 Dell PowerProtect Data Domain存在安全漏洞,该漏洞源于RestAPI身份验证算法实现不当,可能导致未经授权的访问。以下版本受到影响:7.7.1.0版本至8.1.0.10版本、7.13.1.0版本至7.13.1.25版本和7.10.1.0版本至7.10.1.50版本。

Description (English)

Dell PowerProtec Data Domain (Dell PowerProtec DD) is a set of hardware equipment for data protection, backup, storage and duplicate data elimination from Dell, United States. Dell PowerProtec Data Domain had a security loophole, which stemmed from the improper implementation of the RestAPI identification algorithm, which could lead to unauthorized access. The following versions were affected: 7.7.1.0 to 8.1.010, 7.13.1.0 to 7.1.125 and 7.10.1.0 to 7.10.1.50.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

戴尔

Published

2025-10-07

Last Modified

2026-02-24

References

https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Patch

https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Share on: