CVE-2025-46606 is a vulnerability in Dell PowerProtect Data Domain with DD OS versions 8.4 through 8.5 involving improper restriction of excessive authentication attempts (CWE-307). This weakness could be exploited by a high privileged remote attacker to gain unauthorized access. The CVSS 3.1 score of 6.2 reflects a medium severity impact with high confidentiality and integrity impact but low availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation responsibility lies with the customer.

Successful exploitation could lead to unauthorized access by a high privileged attacker remotely, potentially compromising confidentiality and integrity of the system. Availability impact is considered low. There are no known active exploits reported in the wild.

Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, customers should monitor Dell communications for updates. In the meantime, restricting remote access to affected versions and enforcing strong authentication policies may reduce risk.