CVE-2025-43727CWE-303

CVE-2025-43727

High · published October 8, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm vulnerability in the RestAPI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.1th percentile
Weakness
CWE-303 · Incorrect Implementation of Authentication Algorithm
Published
2025-10-08T00:15Z
Affected products (3)
ProductVersionsFixed in
dell/data_domain_operating_system≥ 7.7.1.0, < 7.10.1.607.10.1.60
dell/data_domain_operating_system≥ 7.13.1.0, < 7.13.1.307.13.1.30
dell/data_domain_operating_system≥ 8.0.0.0, < 8.3.0.108.3.0.10
References (1)
https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 07 OCT 19:26Z
    Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0…
    cvelistv5