CVE-2025-43994 HIGH

CVE-2025-43994

Vendor Dell
Product Dell Storage Manager
Weakness CWE-306 · Missing auth
Published October 24, 2025
Last update October 24, 2025
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Key dates

02Disclosure timeline

October 24, 2025 CVE published
October 24, 2025 Record updated