CVE-2025-46606 affects Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions 8.4 through 8.5. The vulnerability arises from improper restriction of excessive authentication attempts (CWE-307), which could be exploited by a high privileged attacker with remote access to gain unauthorized access. The CVSS 3.1 score of 6.2 reflects a medium severity with network attack vector, high attack complexity, and high privileges required. The vulnerability impacts confidentiality and integrity with low impact on availability. No patch or official remediation level has been disclosed by Dell at this time.

Successful exploitation could lead to unauthorized access by a high privileged attacker remotely, potentially compromising confidentiality and integrity of the system. The impact on availability is considered low. There are no known active exploits reported in the wild. The medium CVSS score reflects moderate risk but requires high privileges and complex attack conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level has been provided by Dell, users should monitor Dell's security advisories for updates. Until a fix is available, restricting remote access to the affected versions and employing network-level controls to limit authentication attempts may help reduce risk.