Dell PowerProtect Data Domain OS 7.7.1.0-8.3.1.0 Weak Crypto Auth CVE-2025-43891
CVE-2025-43891 Published on October 7, 2025

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an use of a Broken or Risky Cryptographic Algorithm vulnerability in the Authentication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-43891 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information. The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Well-known techniques may exist to break the algorithm.


Products Associated with CVE-2025-43891

Want to know whenever a new CVE is published for Dell Data Domain Operating System? stack.watch will email you.

 

Affected Versions

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023:

Exploit Probability

EPSS
0.05%
Percentile
15.07%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.