Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-43943 EUVD-2025-31123GHSA-xchv-gqgx-v2vx

Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('…

Published Sep 25, 2025 · Updated Sep 25, 2025 · Assigned by dell

Description

Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Affected products

VendorProductAffectedFixed
Dell Cloud Disaster Recovery N/A – < 19.20 19.20

References