CVE-2025-46607 is an improper authentication vulnerability in Dell PowerProtect Data Domain running DD OS Feature Release versions 8.4 through 8.5. This flaw could be exploited remotely by an attacker with high privileges to bypass authentication controls, potentially leading to unauthorized access with high impact on confidentiality, integrity, and availability. The CVSS v3.1 vector indicates network attack complexity is high, no user interaction is required, and the attacker must already have high privileges. No official remediation or patch has been published by Dell as of the current information.

Successful exploitation could result in unauthorized access to the affected system, compromising confidentiality, integrity, and availability of data and services on the Dell PowerProtect Data Domain appliance. The attacker must have high privileges and remote access, which limits the scope but still poses a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected versions and monitor for suspicious activity. Follow Dell's security advisories closely for updates on patches or mitigations.