CVE-2025-23375
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 28, 2025
Updated: May 13, 2025
CWE ID 648
Summary
CVE-2025-23375 is a vulnerability affecting Dell PowerProtect Data Manager Reporting version 19.17. This issue involves the misuse of privileged APIs, allowing a low-privileged attacker with local access to elevate their privileges. By exploiting this vulnerability, an attacker could gain higher levels of access, potentially compromising the system further. Despite the local requirement for exploitation, organizations should promptly patch their affected installations to prevent unauthorized privilege escalation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Dell