6.5
CVE-2026-35162
- EPSS 0.21%
- Veröffentlicht 17.06.2026 14:48:15
- Zuletzt bearbeitet 25.06.2026 14:16:38
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Powerflex Manager Version < 4.5.5.2
Dell ≫ Powerflex Manager Version >= 4.6.0 < 5.1.0.1
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.111 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| security_alert@emc.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilities