Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-43995 EUVD-2025-35853GHSA-q4x9-46wj-f2cj

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated att…

Published Oct 24, 2025 · Updated Feb 26, 2026 · Assigned by dell

Description

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.

Affected products

VendorProductAffectedFixed
Dell Dell Storage Manager N/A – < 2020 R1.21 2020 R1.21

Advisories 1

References