CVE Catalog

CVE-2025-46371

LowCVSS 3.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.07%

0th percentile - higher than 0% of all known CVEs

Summary

Dell PowerFlex Manager versions up to 4.6.2 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH component. A low privileged attacker with local access can bypass protection mechanisms.

Risk Assessment

An attacker may bypass SSH security, potentially leading to unauthorized access or privilege escalation.

Recommendation

Upgrade Dell PowerFlex Manager to a version later than 4.6.2.

Original NVD description (English source)

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS