PT-2025-37069 · Dell · Dell Powerprotect Data Manager

Published 2025-04-18 · Updated 2025-10-20 · CVE-2025-43886

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20

Description: Dell PowerProtect Data Manager versions 19.19 and 19.20, when used with Hyper-V, contain a path traversal vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability to gain filesystem access. The vulnerability involves the use of a '.../...//' path traversal sequence.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-35

Related Identifiers

BDU:2025-11423

CVE-2025-43886

Affected Products

Dell Powerprotect Data Manager

References · 6

• https://osv.dev/vulnerability/CVE-2025-43886 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43886 · Security Note
• https://dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11423 · Security Note
• https://twitter.com/CVEnew/status/1965920227000021331 · Twitter Post
• https://t.me/cveNotify/139393 · Telegram Post