CVE-2025-21111
08.01.2025, 18:15
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | vxrail_d560_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_d560f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e460_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560f_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e560n_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e660_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e660f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e660n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e665_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e665f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_e665n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_g560_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_g560_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_g560f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p470_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p570_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p570_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p570f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p570f_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p580n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p580n_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p670f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p670n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p675f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_p675n_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_s470_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_s570_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_s570_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_s670_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_v470_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_v570_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_v570_vcf_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_v670f_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_vd-4000r_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_vd-4000w_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_vd-4000z_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_vd-4510c_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
| dell | vxrail_vd-4520c_firmware | 8.0.000 ≤ 𝑥 < 8.320 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-256 - Plaintext Storage of a PasswordStoring a password in plaintext may result in a system compromise.
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.