Dell PowerProtect Data Domain Weak Credentials Vulnerability Allowing Unauthorized Access

A vulnerability exists in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) versions 7.7.1.0 through 8.5, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.50. This vulnerability involves the use of weak credentials, which could be exploited by an unauthenticated attacker with local access, potentially leading to unauthorized access to the system.

Impact

Exploitation of this vulnerability could result in unauthorized access to the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain versions 8.6.1.10, 8.7.0.0 or later, or for LTS2025 release versions 8.3.1.30 or later. For LTS2024 release versions, upgrade to 7.13.1.70 or later.