CVE-2025-43990

HIGH 7.8CVE-2025-43990 · Published 05/11/2025 · updated 18/10/2026

In short

CVE-2025-43990 is a HIGH (CVSS 7.8) vulnerability affecting command monitor (dell).
Chance of exploitation in the next 30 days (EPSS): 0.14%, higher than 3.8% of all vulnerabilities.
Fix: update to 10.12.3.28 or later.

Package	Affected versions	Patched versions
command monitor dell	`< 10.12.3.28`	`10.12.3.28`

Description

Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

References

dell.com/support/kbdoc/en-us/000384947/dsa-2025-414 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free