CVE-2025-46676

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46676
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS 2023 release versions 7.10.1.0 through 7.10.1.70, contain an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000405813/dsa-2025-415-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:8.4.0.0:*:*:*:*:*:*:*
History

17 Jun 2026, 09:26

Type Values Removed Values Added
Summary
  • (es) Dell PowerProtect Data Domain con Data Domain Sistema Operativo (DD OS) de las versiones Feature Release 7.7.1.0 a 8.4.0.0, la versión LTS2025 8.3.1.10, las versiones LTS2024 7.13.1.0 a 7.13.1.40, las versiones LTS 2023 7.10.1.0 a 7.10.1.70, contienen una vulnerabilidad de Exposición de Información Sensible a un Actor No Autorizado. Un atacante con altos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la revelación de información.

05 Feb 2026, 13:28

Type Values Removed Values Added
CPE cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:8.4.0.0:*:*:*:*:*:*:*
First Time Dell
Dell data Domain Operating System
References () https://www.dell.com/support/kbdoc/en-us/000405813/dsa-2025-415-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000405813/dsa-2025-415-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities - Vendor Advisory

09 Jan 2026, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-09 16:16

Updated : 2026-06-17 09:26

NVD link : CVE-2025-46676

Mitre link : CVE-2025-46676

CVE.ORG link : CVE-2025-46676

JSON object : View

Products Affected

dell

  • data_domain_operating_system
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor