The vulnerability is a stack-based buffer overflow in Dell PowerProtect Data Domain, classified as CWE-121. An attacker with high privileged remote access can trigger the overflow, causing the affected service to terminate or become unresponsive, leading to a denial of service. The flaw does not grant arbitrary code execution or data theft; its primary impact is disrupting normal operation.

Dell PowerProtect Data Domain software. The flaw affects Feature Release versions from 7.7.1.0 up to LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, and LTS2026 release versions 8.6.1.0 through 8.6.1.20. The CVE applies only to the named versions listed above.

The CVSS score of 4.9 indicates moderate severity. The EPSS score is not available, so exact exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, a likely attack vector requires an attacker to have remote access with high privilege privileges on the target system; the attacker would then need to craft a malicious input to overflow the buffer. Because of the specificity of the privilege requirement and lack of a publicly known exploit, the current risk is moderate and best mitigated by patching. Monitoring for abnormal service restarts and limiting privileged remote access are prudent as complementary controls.