CVE-2025-46607

Apply vendor-released security update from Dell DSA-2026-060, which provides patched versions addressing the improper authentication vulnerability in PowerProtect Data Domain 8.4-8.5. Consult the advisory for exact patched version numbers and deployment procedures. As an interim compensating control pending patch deployment, restrict remote access to PowerProtect Data Domain administrative interfaces to a network allowlist of trusted management stations and disable unnecessary remote access protocols if not required for operations. Implement strict access controls limiting high-privilege account usage to authorized administrators only, enforce multi-factor authentication for administrative access if supported by the product, and audit authentication logs for suspicious privilege escalation or authentication bypass attempts. Monitor for authentication failures and privilege escalation events in system logs as detection compensating control. Note that these controls add operational friction and should be considered temporary pending patch application, as the underlying vulnerability remains exploitable by determined attackers with legitimate credentials.