CVE-2025-43994
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Risk Assessment
An unauthenticated attacker can access critical functions and disclose sensitive information, potentially compromising data confidentiality.
Recommendation
Apply security updates provided by Dell for Dell Storage Manager.
Other vulnerabilities in Dell Storage Manager
See all- CVE-2025-43995Critical
Dell Storage Manager version 20.1.21 contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector allows access to APIs exposed by ApiProxy.war in DataCollectorEar.ear using a special SessionKey and UserId.
- CVE-2017-14374Critical
The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 is protected using a hard-coded password. A remote user with knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface.
- CVE-2025-46425Medium
Dell Storage Manager version 20.1.20 contains an improper restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could exploit it, leading to unauthorized access.
Original NVD description (English source)
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS