CVE-2025-43914
Full vulnerability record from the local CVENow database.
Description
Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2025-10-07 18:16:00
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-43914",
"sourceIdentifier": "[email protected]",
"published": "2025-10-07T18:16:00.000",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access."
},
{
"lang": "es",
"value": "Dell PowerProtect Data Domain BoostFS para sistemas Linux Ubuntu de las versiones de Feature Release 7.7.1.0 a 8.3.0.15, la versión de lanzamiento LTS2025 8.3.1.0, las versiones de lanzamiento LTS2024 7.13.1.0 a 7.13.1.30, las versiones de lanzamiento LTS 2023 7.10.1.0 a 7.10.1.60, contienen una vulnerabilidad de Asignación Incorrecta de Privilegios. Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Dell",
"product": "PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release",
"defaultStatus": "unaffected",
"versions": [
{
"version": "7.7.1.0",
"lessThan": "8.4.0.0",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025",
"defaultStatus": "unaffected",
"versions": [
{
"version": "8.3.1.0",
"lessThan": "8.3.1.10",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024",
"defaultStatus": "unaffected",
"versions": [
{
"version": "7.13.1.0",
"lessThan": "7.13.1.40",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023",
"defaultStatus": "unaffected",
"versions": [
{
"version": "7.10.1.0",
"lessThan": "7.10.1.70",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-10-08T03:55:18.919586Z",
"id": "CVE-2025-43914",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-266"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.7.1.0",
"versionEndExcluding": "7.10.1.70",
"matchCriteriaId": "7FCE50EA-F2B8-4455-A489-1947B0CBFEEA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.13.1.0",
"versionEndIncluding": "7.13.1.40",
"matchCriteriaId": "B451DCE2-896E-4DFC-AA2B-CA1B0C257BAD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0.0",
"versionEndIncluding": "8.3.0.15",
"matchCriteriaId": "303AC151-B605-4F51-B001-197787B6B54E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.3.1.0",
"versionEndExcluding": "8.3.1.10",
"matchCriteriaId": "9E0743E3-14E7-4FF9-88C5-E038D62F2344"
}
]
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}