Product:
Dell Storage Manager
Summary
Dell Storage Center – Dell Storage Manager contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. This could allow unauthorized access to sensitive data within the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2025-43994 |
Exploitation
To exploit this vulnerability, an attacker would need remote access to the affected system. By leveraging the missing authentication, the attacker could send specially crafted requests to the Dell Storage Manager, potentially gaining access to sensitive information without needing valid credentials.
Affected Products
- Dell Storage Manager – version 20.1.21: Contains a critical vulnerability that allows unauthenticated access.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Additionally, restricting remote access to the Dell Storage Manager and implementing strong authentication mechanisms can help protect against potential exploitation.