Dell PowerProtect Data Domain Broken Cryptographic Algorithm Vulnerability Allowing Information Disclosure

A vulnerability has been identified in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) versions 7.7.1.0 prior to 8.3.0.15, as well as LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability involves the use of a broken or risky cryptographic algorithm in the authentication process, which could be exploited by an unauthenticated attacker with remote access, leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users can upgrade to Dell PowerProtect Data Domain OS version 8.4.0.0 or later. For instructions on how to upgrade, see the Dell Knowledge Base article 'How to Upgrade the Data Domain Operating System'.