PT-2025-1065 · Dell · Dell Vxrail

Klaas Demter · Published 2025-01-08 · Updated 2025-01-24 · CVE-2025-21111

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell VxRail versions 8.0.000 through 8.0.311

Description The issue is related to the storage of critical information in plaintext, which could allow an attacker to expose protected information. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Recommendations For Dell VxRail versions 8.0.000 through 8.0.311, consider disabling the storage of passwords in plaintext as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. Update to a version that contains a fix for this vulnerability when available.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

BDU:2025-00299

CVE-2025-21111

Affected Products

Dell Vxrail

References · 9

• https://dell.com/support/kbdoc/en-us/000269958/dsa-2025-025-security-update-for-dell-vxrail-for-multiple-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00299 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21111 · Security Note
• https://twitter.com/VulmonFeeds/status/1877074763748725070 · Twitter Post
• https://t.me/cvedetector/14702 · Telegram Post
• https://t.me/latest_high_impact_cve/1752 · Telegram Post
• https://t.me/cvenotify/108525 · Telegram Post
• https://twitter.com/CVEnew/status/1877057342551871562 · Twitter Post