CVE-2025-43943: OS Command Injection
Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Cloud Disaster Recoveryto a version that resolves this vulnerability.Fixed in 19.20
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43943?
CVE-2025-43943 has a high severity rating as it allows privileged local attackers to execute arbitrary OS commands.
How do I fix CVE-2025-43943?
To mitigate CVE-2025-43943, upgrade Dell Cloud Disaster Recovery to version 19.20 or later.
What versions of Dell Cloud Disaster Recovery are affected by CVE-2025-43943?
CVE-2025-43943 affects all versions of Dell Cloud Disaster Recovery prior to 19.20.
What kind of attacks can CVE-2025-43943 enable?
CVE-2025-43943 can enable attackers to execute arbitrary commands on the vulnerable system.
Is local access required to exploit CVE-2025-43943?
Yes, local access is required for an attacker to exploit CVE-2025-43943.