CVE-2025-43914

Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 0.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Dell PowerProtect Data Domain BoostFS para sistemas Linux Ubuntu de las versiones de Feature Release 7.7.1.0 a 8.3.0.15, la versión de lanzamiento LTS2025 8.3.1.0, las versiones de lanzamiento LTS2024 7.13.1.0 a 7.13.1.30, las versiones de lanzamiento LTS 2023 7.10.1.0 a 7.10.1.60, contienen una vulnerabilidad de Asignación Incorrecta de Privilegios. Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado.

Information

Published : 2025-10-07 18:16

Updated : 2026-10-18 21:10

NVD link : CVE-2025-43914

Mitre link : CVE-2025-43914

CVE.ORG link : CVE-2025-43914

JSON object : View

Products Affected

dell

data_domain_operating_system

CWE

CWE-266

Incorrect Privilege Assignment

NVD-CWE-noinfo

{"id": "CVE-2025-43914", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43914", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-08T03:55:18.919586Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release", "versions": [{"status": "affected", "version": "7.7.1.0", "lessThan": "8.4.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025", "versions": [{"status": "affected", "version": "8.3.1.0", "lessThan": "8.3.1.10", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024", "versions": [{"status": "affected", "version": "7.13.1.0", "lessThan": "7.13.1.40", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023", "versions": [{"status": "affected", "version": "7.10.1.0", "lessThan": "7.10.1.70", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-07T18:16:00.000", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-266"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access."}, {"lang": "es", "value": "Dell PowerProtect Data Domain BoostFS para sistemas Linux Ubuntu de las versiones de Feature Release 7.7.1.0 a 8.3.0.15, la versi\u00f3n de lanzamiento LTS2025 8.3.1.0, las versiones de lanzamiento LTS2024 7.13.1.0 a 7.13.1.30, las versiones de lanzamiento LTS 2023 7.10.1.0 a 7.10.1.60, contienen una vulnerabilidad de Asignaci\u00f3n Incorrecta de Privilegios. Un atacante con privilegios bajos y acceso local podr\u00eda potencialmente explotar esta vulnerabilidad, lo que llevar\u00eda a un acceso no autorizado."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FCE50EA-F2B8-4455-A489-1947B0CBFEEA", "versionEndExcluding": "7.10.1.70", "versionStartIncluding": "7.7.1.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B451DCE2-896E-4DFC-AA2B-CA1B0C257BAD", "versionEndIncluding": "7.13.1.40", "versionStartIncluding": "7.13.1.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "303AC151-B605-4F51-B001-197787B6B54E", "versionEndIncluding": "8.3.0.15", "versionStartIncluding": "8.0.0.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E0743E3-14E7-4FF9-88C5-E038D62F2344", "versionEndExcluding": "8.3.1.10", "versionStartIncluding": "8.3.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}