CVE Vulnerabilities

CVE-2025-22477

Improper Authentication

Published: May 06, 2025 | Modified: May 13, 2025
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Storage_manager Dell 16.3.20 (including) 16.3.20 (including)
Storage_manager Dell 2016-r2.1 (including) 2016-r2.1 (including)
Storage_manager Dell 2020-r1 (including) 2020-r1 (including)
Storage_manager Dell 2020-r1.10 (including) 2020-r1.10 (including)
Storage_manager Dell 2020-r1.2 (including) 2020-r1.2 (including)
Storage_manager Dell 2020-r1.20 (including) 2020-r1.20 (including)

Potential Mitigations

References