PT-2025-18078 · Dell · Dell Powerprotect Data Manager Reporting

Published 2025-04-24 · Updated 2025-05-13 · CVE-2025-23375

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager Reporting version 19.17

Description The issue is related to an incorrect use of privileged APIs, which could be exploited by an attacker with low privileges and local access, potentially leading to elevation of privileges.

Recommendations For Dell PowerProtect Data Manager Reporting version 19.17, consider restricting local access to minimize the risk of exploitation until a fix is available. As a temporary workaround, consider disabling any functionality that relies on privileged APIs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-264

CWE-648

Related Identifiers

BDU:2025-05375

CVE-2025-23375

Affected Products

Dell Powerprotect Data Manager Reporting

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-23375 · Security Note
• https://dell.com/support/kbdoc/en-us/000311083/dsa-2025-062-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05375 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23375 · Vendor Advisory
• https://twitter.com/cybercronai/status/1916886487762620885 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025042514 · Note
• https://twitter.com/cybercronai/status/1917360977487577256 · Twitter Post
• https://t.me/cvedetector/23931 · Telegram Post
• https://twitter.com/cybercronai/status/1917226250474606981 · Twitter Post
• https://t.me/cvetracker/22530 · Telegram Post
• https://twitter.com/CVEnew/status/1916868901712912794 · Twitter Post
• https://t.me/cvenotify/121901 · Telegram Post