CVE-2025-45376

HighCVSS 7.5

Published: 29/09/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Dell Repository Manager (DRM) versions 3.4.7 and 3.4.8 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability, allowing a low privileged attacker with local access to elevate privileges.

Risk Assessment

A local attacker can gain elevated privileges, potentially leading to unauthorized system changes and security breaches.

Recommendation

Update Dell Repository Manager to the latest version that fixes this vulnerability and restrict local access to the system.

Other vulnerabilities in Dell Repository Manager

CVE-2026-86359High
Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Original NVD description (English source)

Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS