CVE-2025-46641

Analyzed Analyzed - Analysis Complete

Improper Authentication in Dell PowerProtect Data Domain Allows Unauthorized Access

Publication date: 2026-04-17

Last updated on: 2026-05-05

Assigner: Dell

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-17

Last Modified

2026-05-05

Generated

2026-07-06

AI Q&A

2026-04-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-46641

EUVD

EUVD-2025-209523

Affected Vendors & Products

Vendor	Product	Version / Range
dell	data_domain_operating_system	From 8.4.0.0 (inc) to 8.5.0.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions 8.4 through 8.5. It is an improper authentication vulnerability that can be exploited by a high privileged attacker who has remote access. Exploiting this vulnerability could allow the attacker to gain unauthorized access.

Impact Analysis

The vulnerability can lead to unauthorized access by a high privileged attacker with remote access. This could result in compromise of confidentiality, integrity, and availability of the affected system and its data.

Compliance Impact

The vulnerability in Dell PowerProtect Data Domain's operating system allows a high privileged attacker with remote access to potentially gain unauthorized access. Such unauthorized access could lead to breaches of confidentiality, integrity, and availability of sensitive data.

This type of vulnerability can negatively impact compliance with common standards and regulations such as GDPR and HIPAA, which require strict controls to protect sensitive personal and health information from unauthorized access.

Hi! I’m here to help you understand CVE-2025-46641. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70