CVE-2025-43914

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-43914", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "state": "PUBLISHED", "assignerShortName": "dell", "dateReserved": "2025-04-19T05:03:41.170Z", "datePublished": "2025-10-07T17:43:48.551Z", "dateUpdated": "2026-02-26T17:48:15.108Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release", "vendor": "Dell", "versions": [{"lessThan": "8.4.0.0", "status": "affected", "version": "7.7.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025", "vendor": "Dell", "versions": [{"lessThan": "8.3.1.10", "status": "affected", "version": "8.3.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024", "vendor": "Dell", "versions": [{"lessThan": "7.13.1.40", "status": "affected", "version": "7.13.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023", "vendor": "Dell", "versions": [{"lessThan": "7.10.1.70", "status": "affected", "version": "7.10.1.0", "versionType": "semver"}]}], "datePublic": "2025-10-01T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access."}], "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-266", "description": "CWE-266: Incorrect Privilege Assignment", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2025-10-07T17:43:48.551Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-43914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-08T03:55:18.919586Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T17:48:15.108Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-43914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-08T03:55:18.919586Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-07T18:31:29.468Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release", "versions": [{"status": "affected", "version": "7.7.1.0", "lessThan": "8.4.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025", "versions": [{"status": "affected", "version": "8.3.1.0", "lessThan": "8.3.1.10", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024", "versions": [{"status": "affected", "version": "7.13.1.0", "lessThan": "7.13.1.40", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023", "versions": [{"status": "affected", "version": "7.10.1.0", "lessThan": "7.10.1.70", "versionType": "semver"}], "defaultStatus": "unaffected"}], "datePublic": "2025-10-01T17:00:00.000Z", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.", "supportingMedia": [{"type": "text/html", "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "CWE-266: Incorrect Privilege Assignment"}]}], "providerMetadata": {"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell", "dateUpdated": "2025-10-07T17:43:48.551Z"}}}, "cveMetadata": {"cveId": "CVE-2025-43914", "state": "PUBLISHED", "dateUpdated": "2026-02-26T17:48:15.108Z", "dateReserved": "2025-04-19T05:03:41.170Z", "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "datePublished": "2025-10-07T17:43:48.551Z", "assignerShortName": "dell"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release", "vendor": "Dell", "versions": [{"lessThan": "8.4.0.0", "status": "affected", "version": "7.7.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025", "vendor": "Dell", "versions": [{"lessThan": "8.3.1.10", "status": "affected", "version": "8.3.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024", "vendor": "Dell", "versions": [{"lessThan": "7.13.1.40", "status": "affected", "version": "7.13.1.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023", "vendor": "Dell", "versions": [{"lessThan": "7.10.1.70", "status": "affected", "version": "7.10.1.0", "versionType": "semver"}]}], "source": "security_alert@emc.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FCE50EA-F2B8-4455-A489-1947B0CBFEEA", "versionEndExcluding": "7.10.1.70", "versionStartIncluding": "7.7.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "B451DCE2-896E-4DFC-AA2B-CA1B0C257BAD", "versionEndIncluding": "7.13.1.40", "versionStartIncluding": "7.13.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "303AC151-B605-4F51-B001-197787B6B54E", "versionEndIncluding": "8.3.0.15", "versionStartIncluding": "8.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E0743E3-14E7-4FF9-88C5-E038D62F2344", "versionEndExcluding": "8.3.1.10", "versionStartIncluding": "8.3.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access."}, {"lang": "es", "value": "Dell PowerProtect Data Domain BoostFS para sistemas Linux Ubuntu de las versiones de Feature Release 7.7.1.0 a 8.3.0.15, la versi\u00f3n de lanzamiento LTS2025 8.3.1.0, las versiones de lanzamiento LTS2024 7.13.1.0 a 7.13.1.30, las versiones de lanzamiento LTS 2023 7.10.1.0 a 7.10.1.60, contienen una vulnerabilidad de Asignaci\u00f3n Incorrecta de Privilegios. Un atacante con privilegios bajos y acceso local podr\u00eda potencialmente explotar esta vulnerabilidad, lo que llevar\u00eda a un acceso no autorizado."}], "id": "CVE-2025-43914", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 6.0, "source": "security_alert@emc.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43914", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-10-08T03:55:18.919586Z", "version": "2.0.3"}}]}, "published": "2025-10-07T18:16:00.000", "references": [{"source": "security_alert@emc.com", "tags": ["Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-266"}], "source": "security_alert@emc.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"created": "2025-10-08T13:35:14.014154+00:00", "updated": "2025-10-08T13:35:14.014181+00:00", "vendors": ["canonical", "canonical$PRODUCT$ubuntu", "dell", "dell$PRODUCT$powerprotect_data_domain", "linux", "linux$PRODUCT$linux", "ubuntu", "ubuntu$PRODUCT$ubuntu"]}