CNNVD-202510-903 Information

CNNVD ID

CNNVD-202510-903

CVE-2025-43913

  • CNNVD Published: 2025-10-07

Description (Chinese)

Dell PowerProtect Data Domain(Dell PowerProtect DD)是美国戴尔(Dell)公司的一套用于数据保护、备份、存储和重复数据消除的硬件设备。 Dell PowerProtect Data Domain存在加密问题漏洞,该漏洞源于使用有缺陷或危险的加密算法,可能导致信息泄露。以下版本受到影响:7.7.1.0版本至8.3.0.15版本、LTS2025 8.3.1.0版本、LTS2024 7.13.1.0版本至7.13.1.30版本和LTS 2023 7.10.1.0版本至7.10.1.60版本。

Description (English)

Dell PowerProtec Data Domain (Dell PowerProtec DD) is a set of hardware equipment for data protection, backup, storage and duplicate data elimination from Dell, United States. Dell PowerProtec Data Domain has a encryption loophole, which stems from the use of defective or dangerous encryption algorithms and may lead to the disclosure of information. The following versions were affected: 7.7.1.0 to 8.3.0.15, LTS2025 8.3.1.0, LTS2024 7.13.1.0 to 7.1.13.30 and LTS 2023 7.10.0 to 7.10.1.60.

Hazard Level

High

Vulnerability Type

加密问题

Affected Vendor

戴尔

Published

2025-10-07

Last Modified

2026-02-24

References

https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Patch

https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Share on: