The vulnerability of the software in the PowerProtect Data Domain Management Center for operating systems Dell EMC Data Domain Operating System (DD OS) arises from the lack of measures to neutralize specific elements. This allows a perpetrator to execute arbitrary code.

🗓️ 14 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

PowerProtect Data Domain Center on DD OS allows arbitrary code via weak neutralization.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-43890	7 Oct 202518:12	–	circl
CNNVD	Dell PowerProtect Data Domain 操作系统命令注入漏洞	7 Oct 202500:00	–	cnnvd
CVE	CVE-2025-43890	7 Oct 202517:53	–	cve
Cvelist	CVE-2025-43890	7 Oct 202517:53	–	cvelist
EUVD	EUVD-2025-32716	7 Oct 202517:53	–	euvd
NVD	CVE-2025-43890	7 Oct 202518:15	–	nvd
OSV	CVE-2025-43890	7 Oct 202518:15	–	osv
Positive Technologies	PT-2025-41147	7 Oct 202500:00	–	ptsecurity
Vulnrichment	CVE-2025-43890	7 Oct 202517:53	–	vulnrichment

Vulners

Node

dell_technologies powerprotect_data_domainRange7.7.1.0–8.3.0.15

OR

dell_technologies powerprotect_data_domainMatch8.3.1.0

OR

dell_technologies powerprotect_data_domainRange7.13.1.0–7.13.1.30

OR

dell_technologies powerprotect_data_domainRange7.10.1.0–7.10.1.60

OR

dell_technologies data_domain_operating_systemMatch8.4

OR

dell_technologies data_domain_operating_systemMatch8.3.1

OR

dell_technologies data_domain_operating_systemMatch7.13.1

OR

dell_technologies data_domain_operating_systemMatch7.10.1

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
web	www.web.nvd.nist.gov/view/vuln/detail

14 Oct 2025 00:00Current

6Medium risk

Vulners AI Score6

CVSS 36.7

CVSS 26.8

EPSS0.0062

powerprotect data domain management center data domain operating system arbitrary code execution neutralization weakness