PT-2026-42769 · Dell · Powerflex Manager

Published 2026-04-24 · Updated 2026-05-24 · CVE-2025-32751

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.3

Description Insecure storage of sensitive information allows a low privileged attacker with local access to potentially gain unauthorized access to sensitive data.

Recommendations Update to a version newer than 4.6.2.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

BDU:2026-09008

CVE-2025-32751

Affected Products

Powerflex Manager

References · 4

• https://dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09008 · Security Note
• https://twitter.com/dailycve/status/2058338784203125038 · Twitter Post