CVE-2025-21102

High

Description

Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Vxrail D560 Firmware
PublishedJan 8, 2025
First seenJan 8, 2025
Weakness typeCWE-256CWE-256

How to fix

Update
  • dell vxrail_d560_firmware7.0.533 or later
  • dell vxrail_d560f_firmware7.0.533 or later
  • dell vxrail_e460_firmware7.0.533 or later
  • dell vxrail_e560_firmware7.0.533 or later
  • dell vxrail_e560_vcf_firmware7.0.533 or later
  • dell vxrail_e560f_firmware7.0.533 or later
  • dell vxrail_e560f_vcf_firmware7.0.533 or later
  • dell vxrail_e560n_firmware7.0.533 or later
  • dell vxrail_e560n_vcf_firmware7.0.533 or later
  • dell vxrail_e660_firmware7.0.533 or later
  • dell vxrail_e660f_firmware7.0.533 or later
  • dell vxrail_e660n_firmware7.0.533 or later

Affected products

ProductAffected versionsFixed in
dell vxrail_d560_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_d560f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e460_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560f_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e560n_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e660_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e660f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e660n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e665_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e665f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_e665n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_g560_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_g560_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_g560f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p470_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p570_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p570_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p570f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p570f_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p580n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p580n_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p670f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p670n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p675f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_p675n_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_s470_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_s570_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_s570_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_s670_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_v470_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_v570_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_v570_vcf_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_v670f_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_vd-4000r_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_vd-4000w_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_vd-4000z_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_vd-4510c_firmware7.0.000 ≤ v < 7.0.5337.0.533
dell vxrail_vd-4520c_firmware7.0.000 ≤ v < 7.0.5337.0.533

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.