Incorrect Privilege Assignment in Dell PowerFlex Manager
CVE-2025-32747

5.3MEDIUM

Key Information:

Vendor

Dell
Status
Powerflex Manager (appliance)
Powerflex Manager (rack)
Powerflex Manager
Vendor
CVE Published:
22 May 2026

What is CVE-2025-32747?

Dell PowerFlex Manager earlier than version 4.6.2 is susceptible to an Incorrect Privilege Assignment vulnerability. This issue enables low-privileged users with local access to exploit the system, potentially allowing them to elevate their privileges and gain unauthorized access to sensitive functions and data. Organizations utilizing this version should take immediate action to mitigate potential risks.

Affected Version(s)

PowerFlex Manager 0 <= 4.6.2

PowerFlex Manager (Appliance) 0

PowerFlex Manager (Appliance) 0

References

https://www.dell.com/support/kbdoc/en-us/000391568/dsa-20...
vendor-advisory
https://www.dell.com/support/kbdoc/en-us/000391392/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.