CVE-2025-46641

CVE-2025-46641 is an improper authentication vulnerability affecting Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) versions 8.4 through 8.5. This flaw could allow an unauthenticated high-privileged attacker with remote network access to bypass authentication controls and gain unauthorized access to affected systems. The vulnerability impacts data protection and backup infrastructure, which are critical components in enterprise environments. The vulnerability carries a CVSS score of 6.6 (Medium severity) with a network-based attack vector requiring high privilege and high attack complexity. Successful exploitation would result in high-impact confidentiality, integrity, and availability breaches. The EPSS score of 0.00025 indicates very low prevalence in real-world exploitation attempts, positioning this as a lower-priority threat in the broader vulnerability landscape. There is currently no evidence of active exploitation in the wild, with the vulnerability absent from the Known Exploited Vulnerabilities catalog and carrying an inactive status on the Hot List. No public exploit code appears to be available. Organizations running affected DD OS versions should prioritize patching according to standard change management procedures, though this should not be treated as an emergency response item given the low exploitation probability and the authentication requirements for successful attack.