Dell PowerProtect Data Domain suffers from an improper validation of integrity check value, a weakness that allows a high‑privileged local attacker to bypass the system’s protection mechanisms. Since the integrity check is not properly verified, an attacker can craft data that the device accepts as authentic, thereby compromising the intended safeguards. The vulnerability does not provide remote code execution but effectively undermines the integrity guarantees of the storage platform.

Affected releases are Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.8, LTS2024 releases 7.13.1.0 through 7.13.1.80, LTS2025 releases 8.3.1.0 through 8.3.1.40, and LTS2026 releases 8.6.1.0 through 8.6.1.20. All devices running any of these releases may be susceptible to the integrity‑check bypass if they have not been patched.

The CVSS score of 6.7 indicates a moderate severity, and no EPSS score is available, making precise exploitation likelihood unclear. The vulnerability requires local, high‑privileged access, so an attacker must already possess local administrative rights to exploit the flaw. Because the flaw specifically enables bypass of protection mechanisms, the risk is mainly to data integrity and confidentiality within the affected storage environment. The vulnerability is not listed in the CISA KEV catalog, which suggests no widespread exploit activity has been observed as of the last update.