PT-2026-42757 · Dell · Powerflex Rack+2

CVE-2025-32745 · Published 2026-04-24 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.2 Dell PowerFlex Appliance (affected versions not specified) Dell PowerFlex Rack (affected versions not specified)

Description An improper certificate validation issue exists in the authentication procedure. An unauthenticated attacker with adjacent network access could exploit this flaw to impact the confidentiality and integrity of protected information, potentially leading to information tampering.

Recommendations Update Dell PowerFlex Manager to a version later than 4.6.2. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Dell PowerFlex Appliance. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Dell PowerFlex Rack.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2026-09003

CVE-2025-32745

Affected Products

Powerflex Appliance

Powerflex Manager

Powerflex Rack

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-32745 · Security Note
• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09003 · Security Note