Approved changes feed: RSS · Atom

cpe:2.3:a:dell:dell_powerprotect_data_domain_with_data_domain_operating_system_(dd_os)_of_feature_release:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductDell Powerprotect Data Domain With Data Domain Operating System (Dd Os) Of Feature Release (5363ee45-a60d-50f1-8444-81dd4efc4d04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43911 vulnerable 2026-06-08 07:25:10.459968 Details available
MEDIUM (6.7)
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root.
Published: 2025-10-07T18:08:29.640Z
Updated: 2026-02-26T17:48:13.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.