Description
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell PowerFlex Manager (Appliance)
Default version status: unaffected
0 to < IC 48.378.00affected0 to < IC 48.383.00affected
Dell PowerFlex Manager (Rack)
Default version status: unaffected
0 to < 3.7.8.0affected0 to < 3.8.3.0affected
Dell PowerFlex Manager
Default version status: unaffected
0 to ≤ 4.6.2affected
References
- https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities ↗
- https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities ↗