PT-2025-43622 · Dell · Dell Storage Manager

Published 2025-10-24 · Updated 2025-10-29 · CVE-2025-43994

Positive Technologies · (AI Summary)

CVSS v3.1

8.6

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Dell Storage Manager versions 20.1.21

Description Dell Storage Manager version 20.1.21 contains a missing authentication mechanism for a critical function. A remote attacker who does not have valid credentials could potentially exploit this issue, resulting in information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-43994

Affected Products

Dell Storage Manager

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-43994 · Security Note
• https://dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43994 · Vendor Advisory
• https://reddit.com/r/pwnhub/comments/1oho6k5/critical_vulnerabilities_in_dell_storage_manager · Reddit Post
• https://twitter.com/cracbot/status/1983489044547031352 · Twitter Post
• https://t.me/CVEtracker/35679 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1981847932002312633 · Twitter Post
• https://twitter.com/CveTodo/status/1983100250479890741 · Twitter Post
• https://twitter.com/CCBalert/status/1982827823048847815 · Twitter Post