High severity · published Oct 7, 2025
CVE-2025-43914
Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions…
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PD
PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release · Dell
7.7.1.0 before 8.4.0.0 · source: vendor
PD
PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2023 · Dell
7.10.1.0 before 7.10.1.70 · source: vendor
PD
PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2024 · Dell
7.13.1.0 before 7.13.1.40 · source: vendor
PD
PowerProtect Data Domain BoostFS for Linux Ubuntu LTS2025 · Dell
8.3.1.0 before 8.3.1.10 · source: vendor
DD
Data Domain Operating System · Dell
7.7.1.0 before 7.10.1.70; 7.13.1.0 through 7.13.1.40; 8.0.0.0 through 8.3.0.15; 8.3.1.0 before 8.3.1.10 · source: NVD
Affected product
PD
PowerProtect Data Domain BoostFS for Linux Ubuntu Feature Release
Dell