CVE Catalog

CVE-2025-46636

MediumCVSS 6.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Risk Assessment

The risk includes the possibility of data manipulation by a local attacker, potentially leading to information integrity compromise in the organization.

Recommendation

Update Dell Encryption to version 11.12.1 or later and restrict local access to the system.

Other vulnerabilities in Dell Encryption

Original NVD description (English source)

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS