Dell Data Domain OS Auth Bypass (DSA-2025-159)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(265947);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/26");

  script_cve_id("CVE-2025-36594");
  script_xref(name:"IAVA", value:"2025-A-0584");

  script_name(english:"Dell Data Domain OS Auth Bypass (DSA-2025-159)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host contains a Dell Data Domain OS install that is affected by an auth bypass vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version number, the version of Dell Data Domain OS is affected by an auth
bypass vulnerability as disclosed in the DSA-2025-159 advisory:

  - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions
  7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions
  7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An unauthenticated
  attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism
  bypass. Remote unauthenticated user can create account that potentially expose customer info, affect system
  integrity and availability. (CVE-2025-36594)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
# https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e605fcdd");
  script_set_attribute(attribute:"solution", value:
"Update Dell Data Domain OS to Feature Release 8.3.1.0 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-36594");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/31");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/07/31");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/09/26");

  script_set_attribute(attribute:"potential_vulnerability", value:"true");
  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:dell:data_domain_operating_system");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dell_data_domain_operating_system_web_interface_detect.nbin");
  script_require_keys("installed_sw/Dell Data Domain Operating System", "Settings/ParanoidReport");
  script_require_ports('Services/www', 443);

  exit(0);
}

include('vcf.inc');

var app_name = 'Dell Data Domain Operating System';
var app_info = vcf::combined_get_app_info(app:app_name);

# currently can't detect the release (e.g. Feature Release, LTS2024 or LTS2023)
if (report_paranoia < 2) audit(AUDIT_PARANOID);

# constraints are based on Feature Release affected/fixed version(s)
var constraints = [
  {'min_version': '7.7.1.0', 'max_version': '7.10.1.60', 'fixed_version': '7.10.1.70'},
  {'min_version': '7.13.1.0', 'max_version': '7.13.1.25', 'fixed_version': '7.13.1.30'},
  {'min_version': '7.14', 'max_version': '8.3.0.15', 'fixed_version': '8.3.1.0'}
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);