Product:
Cloud Disaster Recovery
Summary
Dell Cloud Disaster Recovery, versions prior to 19.20, contain an Improper Neutralization of Special Elements used in an OS Command vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. This could lead to significant security risks for affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2025-43943 |
Exploitation
To exploit this vulnerability, an attacker with local access would need to craft specific input that is not properly sanitized by the application. By injecting malicious commands into the system, the attacker could execute arbitrary commands with root privileges, potentially compromising the entire system.
Affected Products
- Cloud Disaster Recovery: Versions prior to 19.20 are vulnerable to OS Command Injection, allowing high privileged attackers to execute arbitrary commands.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell Cloud Disaster Recovery version 19.20 or later. Additionally, it is recommended to implement strict access controls and monitor for any unauthorized access attempts to further protect against potential exploitation.