CVE-2025-43990CWE-250

CVE-2025-43990

High · published November 5, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

⚡ A local attacker with low privileges could escalate their access, thanks to a sneaky flaw in Dell Command Monitor! 🔥 Think of it like a delivery person who isn’t supposed to enter a locked room, but finds an unused key lying around. That key gives them unrestricted access to all the goodies inside, leading to potential chaos! If exploited, a low privileged attacker could gain elevated privileges, allowing them to perform actions that could compromise system integrity and security. This could mean accessing sensitive data or even controlling system functions, and that's just a recipe for disaster!

Put simply

Think of it like a delivery person who isn’t supposed to enter a locked room, but finds an unused key lying around. That key gives them unrestricted access to all the goodies inside, leading to potential chaos! This vulnerability in Dell Command Monitor allows a low privileged attacker with local access to execute actions at a higher privilege level than intended, effectively bypassing security restrictions.

What to do

If exploited, a low privileged attacker could gain elevated privileges, allowing them to perform actions that could compromise system integrity and security. This could mean accessing sensitive data or even controlling system functions, and that's just a recipe for disaster! Update Dell Command Monitor to version 10.12.3.28 or later to close this vulnerability. Regularly review access controls and minimize the number of users who have physical access to sensitive systems. 🛡️ You've got this! Stay proactive, and you'll keep your system secure! 💪✨

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00145 · 3.4th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-11-05T22:15Z
Affected products (1)
ProductVersionsFixed in
dell/command_monitor< 10.12.3.2810.12.3.28
References (1)
EPSS history
Timeline
  • 05 NOV 17:01Z
    Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability
    cvelistv5