CVE-2025-46605 is a session fixation vulnerability in Dell PowerProtect Data Domain running DD OS versions 8.4 through 8.5. This vulnerability allows a high privileged attacker with remote access to potentially fixate a session identifier, leading to unauthorized access. The CVSS 3.1 base score is 6.2 (medium severity) with attack vector network, high attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity with low impact on availability. No patch or official remediation level has been disclosed by Dell as of the publication date.

Successful exploitation could lead to unauthorized access by a high privileged remote attacker, compromising confidentiality and integrity of the affected system. Availability impact is low. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to trusted users only and monitor for suspicious activity related to session management. Avoid exposing vulnerable versions externally where possible.