CVE-2025-21111

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-08 · updated 2026-06-17
Weakness: CWE-256

Description

Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Affected products

Dell Vxrail D560 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail D560F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E460 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560 Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560F Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E560N Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E660 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E660F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E660N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E665 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E665F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail E665N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail G560 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail G560 Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail G560F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P470 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P570 Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P570 Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P570F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P570F Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P580N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P580N Vcf Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P670F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P670N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P675F Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail P675N Firmware: from 8.0.000 before 8.320 — fixed in 8.320
Dell Vxrail S470 Firmware: from 8.0.000 before 8.320 — fixed in 8.320

How to fix

Upgrade to a fixed version: Dell Vxrail D560 Firmware 8.320; Dell Vxrail D560F Firmware 8.320; Dell Vxrail E460 Firmware 8.320; Dell Vxrail E560 Firmware 8.320; Dell Vxrail E560 Vcf Firmware 8.320; Dell Vxrail E560F Firmware 8.320; Dell Vxrail E560F Vcf Firmware 8.320; Dell Vxrail E560N Firmware 8.320; Dell Vxrail E560N Vcf Firmware 8.320; Dell Vxrail E660 Firmware 8.320; Dell Vxrail E660F Firmware 8.320; Dell Vxrail E660N Firmware 8.320. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000269958/dsa-2025-025-security-update-for-dell-vxrail-for-multiple-vulnerabilities

Get alerted when CVE-2025-21111 or the next vulnerability affects your stack