PT-2025-19885 · Dell · Dell Storage Manager

Published 2025-05-05 · Updated 2025-05-07 · CVE-2025-22477

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Storage Center - Dell Storage Manager version 20.1.20

Description The issue is related to an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this, leading to Elevation of privileges.

Recommendations For version 20.1.20, update to a version that contains a fix for this issue, as the current version is affected by an Improper Authentication vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-06842

CVE-2025-22477

Affected Products

Dell Storage Manager

References · 9

• https://osv.dev/vulnerability/CVE-2025-22477 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06842 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22477 · Security Note
• https://dell.com/support/kbdoc/en-us/000317318/dsa-2025-191-security-update-for-storage-center-dell-storage-manager-vulnerabilities · Vendor Advisory
• https://t.me/latest_high_impact_cve/2290 · Telegram Post
• https://t.me/cvedetector/24638 · Telegram Post
• https://dell.com/support/kbdoc/ru-ru/000317318/dsa-2025-191-security-update-for-storage-center-dell-storage-manager-vulnerabilities · Note
• https://twitter.com/cybercronai/status/1920260068232122843 · Twitter Post
• https://twitter.com/CVEnew/status/1919796057162105252 · Twitter Post