CVE-2025-32747

7.8 Élevée

Publiée le 22/05/2026 à 16:16 · Modifiée le 05/10/2026 à 16:10 · Analysée par le NVD · Source : security_alert@emc.com

Description

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Traduire en français

Produits concernés

Dell PowerFlex Manager (Appliance)
Dell PowerFlex Manager (Rack)
Dell PowerFlex Manager
Dell powerflex appliance intelligent catalog
Dell powerflex rack

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security_alert@emc.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`
3.1	7.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-266

Références

https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories