CVE-2025-22475
published 2025-02-04CVE-2025-22475: Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.21%
11.5th percentile
Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote attacker could potentially exploit this vulnerability, leading to Information tampering.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | data_domain_operating_system | >= 7.10.1.0 < 7.10.1.50 | 7.10.1.50 |
| dell | data_domain_operating_system | >= 7.13.1.0 < 7.13.1.10 | 7.13.1.10 |
| dell | data_domain_operating_system | >= 7.14.0.0 < 8.3.0.0 | 8.3.0.0 |
| dell | powerprotect_dd | 7.10.1.0 – 7.10.1.40 | — |
| dell | powerprotect_dd | 7.13.1.0 – 7.13.1.10 | — |
| dell | powerprotect_dd | 7.7.1.0 – 8.1.0.10 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-02-04
Published