BaseFortify

Publication date: 2025-10-24

Last updated on: 2025-11-04

Assigner: Dell

Description

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-24

Last Modified

2025-11-04

Generated

2026-07-06

AI Q&A

2025-10-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43994

EUVD

EUVD-2025-35844

Affected Vendors & Products

Vendor	Product	Version / Range
dell	storage_manager	to 2020 (exc)
dell	storage_manager	2020
dell	storage_manager	2020
dell	storage_manager	2020
dell	storage_manager	2020

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Impact Analysis

The vulnerability can lead to information disclosure, meaning sensitive data could be exposed to unauthorized parties. Additionally, the CVSS score indicates it could also impact integrity and availability, potentially causing data alteration or service disruption.

Executive Summary

This vulnerability is a Missing Authentication for Critical Function in Dell Storage Center - Dell Storage Manager version 20.1.21. It allows an unauthenticated attacker with remote access to potentially exploit the system, leading to information disclosure.

Hi! I’m here to help you understand CVE-2025-43994. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70