Unrated severityNVD Advisory· Published Apr 3, 2025· Updated Feb 26, 2026

CVE-2025-29987

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Powerprotect Data Domainllm-fuzzy
Range: <8.3.0.15
Dell/DD OS 7.10v5
Range: 7.10.1.0
Dell/DD OS 7.13v5
Range: 7.13.1.0
Dell/DD OS 8.3v5
Range: 7.7.1.0
Dell/Powerprotect Dp Series Appliancecpe-rescue
Range: N/A

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000300899/dsa-2025-139-dell-technologies-powerprotect-data-domain-security-update-for-a-security-vulnerabilitymitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000