Description
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information tampering.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell PowerFlex Manager (Appliance)
Default version status: unaffected
0 to < IC 48.378.00affected0 to < IC 48.383.00affected
Dell PowerFlex Manager (Rack)
Default version status: unaffected
0 to < 3.7.8.0affected0 to < 3.8.3.0affected
Dell PowerFlex Manager
Default version status: unaffected
0 to ≤ 4.6.2affected
References
- https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities ↗
- https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities ↗