Critical Dell Storage Manager flaws could let hackers access sensitive data

Dell Technologies has issued a warning to customers after the discovery of critical vulnerabilities in its Storage Manager service.

The three flaws, tracked as CVE-2025-43995, CVE-2025-43994, and CVE-2025-46425, command CVSS scores of 9.8, 8.6, and 6.5, respectively.

All versions of Dell Storage Manager prior to version 20.1.21 are affected by the vulnerabilities, and the company has urged customers to immediately follow remediation steps to avoid potential compromise.

Remediation is available for versions 2020 R1.22 and later, according to the advisory.

“Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability,” the company