CVE-2025-21102

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-08 · updated 2026-06-17
Weakness: CWE-256

Description

Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Affected products

Dell Vxrail D560 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail D560F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E460 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560 Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560F Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E560N Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E660 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E660F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E660N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E665 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E665F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail E665N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail G560 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail G560 Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail G560F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P470 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P570 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P570 Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P570F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P570F Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P580N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P580N Vcf Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P670F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P670N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P675F Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail P675N Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533
Dell Vxrail S470 Firmware: from 7.0.000 before 7.0.533 — fixed in 7.0.533

How to fix

Upgrade to a fixed version: Dell Vxrail D560 Firmware 7.0.533; Dell Vxrail D560F Firmware 7.0.533; Dell Vxrail E460 Firmware 7.0.533; Dell Vxrail E560 Firmware 7.0.533; Dell Vxrail E560 Vcf Firmware 7.0.533; Dell Vxrail E560F Firmware 7.0.533; Dell Vxrail E560F Vcf Firmware 7.0.533; Dell Vxrail E560N Firmware 7.0.533; Dell Vxrail E560N Vcf Firmware 7.0.533; Dell Vxrail E660 Firmware 7.0.533; Dell Vxrail E660F Firmware 7.0.533; Dell Vxrail E660N Firmware 7.0.533. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000269793/dsa-2025-027-security-update-for-dell-vxrail-for-multiple-vulnerabilities?ref=emcadvisory_000269793_High_null

Get alerted when CVE-2025-21102 or the next vulnerability affects your stack