PT-2025-37071 · Dell · Dell Powerprotect Data Manager

Published 2025-04-20 · Updated 2025-10-20 · CVE-2025-43938

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20

Description: Dell PowerProtect Data Manager, running on Hyper-V, contains a vulnerability related to the plaintext storage of passwords. A high-privileged attacker with local access could potentially disclose user credentials. The attacker may be able to use the exposed credentials to gain unauthorized access with the privileges of the compromised account.

Recommendations: For Dell PowerProtect Data Manager version 19.19, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Dell PowerProtect Data Manager version 19.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-256

Related Identifiers

BDU:2025-11421

CVE-2025-43938

Affected Products

Dell Powerprotect Data Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-43938 · Security Note
• https://dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43938 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11421 · Security Note
• https://t.me/cveNotify/139383 · Telegram Post
• https://twitter.com/CVEnew/status/1965920231131398432 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1965845458401562778 · Twitter Post