CVE-2025-43994CWE-306

CVE-2025-43994

High · published October 24, 2025

CVSS v3.1
8.6
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

🚨 Unauthenticated access is the ticket here! The Dell Storage Center's missing authentication flaw could let an attacker peek into sensitive info without breaking a sweat! 🔥 Think of it like a restaurant with a menu available to everyone but a locked kitchen. Anyone can look at the menu (data), but without the right access, they can't actually place an order (exploit the system). This vulnerability lets attackers view the menu without permission! If exploited, an attacker could gain unauthorized access to potentially sensitive information stored in the Dell Storage Manager. This could lead to data leaks that seriously compromise the integrity of your organization, potentially revealing critical business insights and operational secrets.

Put simply

Think of it like a restaurant with a menu available to everyone but a locked kitchen. Anyone can look at the menu (data), but without the right access, they can't actually place an order (exploit the system). This vulnerability lets attackers view the menu without permission! This vulnerability stems from missing authentication checks for critical functions in Dell Storage Manager versions 20.1.21. It allows unauthenticated users with remote access to retrieve sensitive information from the system, leading to potential information disclosure.

What to do

If exploited, an attacker could gain unauthorized access to potentially sensitive information stored in the Dell Storage Manager. This could lead to data leaks that seriously compromise the integrity of your organization, potentially revealing critical business insights and operational secrets. To mitigate this risk, ensure you update Dell Storage Manager to the latest version immediately. Implement stricter authentication protocols and conduct a thorough security audit of your storage systems to identify any other potential vulnerabilities. Don't wait—act fast! You've got this! Secure your systems and keep that data locked up tight! 🛡️

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00595 · 47.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-10-24T19:15Z
Affected products (5)
ProductVersionsFixed in
dell/storage_manager< 20202020
dell/storage_managerall versions—
dell/storage_managerall versions—
dell/storage_managerall versions—
dell/storage_managerall versions—
References (1)
EPSS history
Timeline
  • 24 OCT 14:14Z
    Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability
    cvelistv5