WID-SEC-W-2025-0225 — Vulnetix

WID-SEC-W-2025-0225 PUBLISHED CVSS 8.699999809265137 HIGH

Dell PowerProtect Data Domain Appliances sind speziell für Backup und Daten-Deduplizierung ausgelegte Systeme.

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
	Dell PowerProtect Data Domain 7.13.1.20
	Dell PowerProtect Data Domain 7.10.1.50
	Dell PowerProtect Data Domain <7.13.1.20
	Amazon Linux 2
	Dell PowerProtect Data Domain 8.3.0.0
	Ubuntu Linux
	Dell PowerProtect Data Domain <7.10.1.50
	Dell PowerProtect Data Domain <8.3.0.0

Exploit Intelligence

HTTP/2 attack simulation & defense lab - Slowloris, Rapid Reset (CVE-2023-44487), HPACK Bomb attacks with 5 layered defenses. Built in pure Python with raw sockets and h2 library. (github-poc-repo)
HTTP/2 attack simulation & defense lab - Slowloris, Rapid Reset (CVE-2023-44487), HPACK Bomb attacks with 5 layered defenses. Built in pure Python with raw sockets and h2 library. (github-poc)
CVE-2024–2961 Security Issue Mitigation Script (github-poc)
A WordPress demo lab for CVE-2024-2961 & CVE-2024-29510 (github-poc)
A WordPress demo lab for CVE-2024-2961 & CVE-2024-29510 (github-poc-repo)
Educational environment for LTAT.04.022 Homework 4. (github-poc-repo)
Educational environment for LTAT.04.022 Homework 4. (github-poc)
PHP RCE CVE-2024-2961 Nucleus Hackathon Demo (github-poc-repo)
PHP RCE CVE-2024-2961 Nucleus Hackathon Demo (github-poc)
PHP RCE CVE-2024-2961 Nucleus Hackathon Demo (github-poc-repo)

…and 177 more exploits

Timeline

Dec 5, 2024 PoC Published
Jan 30, 2025 CVE Published
Apr 9, 2025 CVE Updated
Mar 31, 2026 Distribution Patch
Mar 31, 2026 Distribution Patch

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›