PT-2025-49311 · Dell · Cloudboost Virtual Appliance

Published 2025-12-05 · Updated 2025-12-05 · CVE-2025-46603

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell CloudBoost Virtual Appliance versions 19.13.0.0 and prior

Description The Dell CloudBoost Virtual Appliance is affected by an issue related to improper restriction of excessive authentication attempts. A remote, unauthenticated attacker could potentially exploit this, potentially leading to unauthorized access.

Recommendations Update to a version later than 19.13.0.0.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-46603

Affected Products

Cloudboost Virtual Appliance

References · 5

• https://osv.dev/vulnerability/CVE-2025-46603 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46603 · Security Note
• https://dell.com/support/kbdoc/en-us/000397417/dsa-2025-387-security-update-for-dell-cloudboost-virtual-appliance-multiple-vulnerabilities · Vendor Advisory
• https://t.me/CVEtracker/38957 · Telegram Post
• https://twitter.com/CVEnew/status/1997021626089566362 · Twitter Post