CVE-2025-43943: Dell Cloud Disaster Recovery

Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Affected products

• Dell Cloud Disaster Recovery: before 19.20 (fixed in 19.20)

Published 2025-09-25. Last modified 2026-06-17.