CVE-2025-29987

8.8 highEPSS 0.5%

High (8.8) in dell. EPSS 0.5% chance of exploitation in the next 30 days.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-1220
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:data_domain_operating_system
dell:powerprotect_data_domain
dell:powerprotect_dm5500_firmware

References

https://www.dell.com/support/kbdoc/en-us/000300899/dsa-2025-139-dell-technologies-powerprotect-data-domain-security-update-for-a-security-vulnerability

Check your stack JSON