PT-2025-37070

CVE-2025-43887

·

Published

2025-04-18

·

Updated

2025-10-20

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20
Description: Dell PowerProtect Data Manager, running on Hyper-V, contains an Incorrect Default Permissions issue. A low-privileged attacker with local access could potentially exploit this issue, leading to Elevation of privileges.
Recommendations: For Dell PowerProtect Data Manager version 19.19, apply appropriate permission restrictions. For Dell PowerProtect Data Manager version 19.20, apply appropriate permission restrictions.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2025-43887
BDU:2025-11420
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com