CVE-2025-43994

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dell:storage_manager::::::::
	cpe:2.3:a:dell:storage_manager:2020:r1::::::
	cpe:2.3:a:dell:storage_manager:2020:r1.10::::::
	cpe:2.3:a:dell:storage_manager:2020:r1.2::::::
	cpe:2.3:a:dell:storage_manager:2020:r1.20::::::

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Dell Storage Center - Dell Storage Manager, versión(es) DSM 20.1.21, contiene una vulnerabilidad de falta de autenticación para una función crítica. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a la revelación de información.

Information

Published : 2025-10-24 15:15

Updated : 2026-10-08 11:10

NVD link : CVE-2025-43994

Mitre link : CVE-2025-43994

CVE.ORG link : CVE-2025-43994

JSON object : View

Products Affected

dell

storage_manager

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-43994", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43994", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-24T14:44:03.871476Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "Dell Storage Manager", "versions": [{"status": "affected", "version": "N/A", "lessThan": "2020 R1.21", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-24T15:15:38.187", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."}, {"lang": "es", "value": "Dell Storage Center - Dell Storage Manager, versi\u00f3n(es) DSM 20.1.21, contiene una vulnerabilidad de falta de autenticaci\u00f3n para una funci\u00f3n cr\u00edtica. Un atacante no autenticado con acceso remoto podr\u00eda potencialmente explotar esta vulnerabilidad, lo que lleva a la revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-10-08T11:10:00.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F19B1117-55A1-46EC-A046-BE3B99EC4900", "versionEndExcluding": "2020"}, {"criteria": "cpe:2.3:a:dell:storage_manager:2020:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "567442CC-381B-43A1-ADE9-AE00075021D4"}, {"criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B978EFB1-877F-4091-A401-F1861229E033"}, {"criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "263E78BD-D8C0-480F-9EED-D5496708CFCD"}, {"criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1055DB85-9105-44E5-9CEB-509C7F7041FE"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}