CVE-2025-46371

5.5 Moyenne

Publiée le 22/05/2026 à 17:16 · Modifiée le 05/10/2026 à 16:10 · Analysée par le NVD · Source : security_alert@emc.com

Description

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Traduire en français

Produits concernés

Dell PowerFlex Manager (Appliance)
Dell PowerFlex Manager (Rack)
Dell PowerFlex Manager
Dell powerflex appliance intelligent catalog
Dell powerflex rack

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.6 Faible	security_alert@emc.com	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N`
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-327

Références

https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories