CVE-2025-21111

HIGH
Published Jan 8, 2025 Modified Jan 24, 2025 CWE-256 CWE-522

Description

Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Is your site exposed to CVE-2025-21111?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-256 CWE-256
CWE-522 CWE-522

Affected Products

Vendor Product
dell vxrail_d560_firmware
dell vxrail_d560
dell vxrail_d560f_firmware
dell vxrail_d560f
dell vxrail_e460_firmware
dell vxrail_e460
dell vxrail_e560_firmware
dell vxrail_e560
dell vxrail_e560_vcf_firmware
dell vxrail_e560_vcf
dell vxrail_e560f_firmware
dell vxrail_e560f
dell vxrail_e560f_vcf_firmware
dell vxrail_e560f_vcf
dell vxrail_e560n_firmware
dell vxrail_e560n
dell vxrail_e560n_vcf_firmware
dell vxrail_e560n_vcf
dell vxrail_e660_firmware
dell vxrail_e660
dell vxrail_e660f_firmware
dell vxrail_e660f
dell vxrail_e660n_firmware
dell vxrail_e660n
dell vxrail_e665_firmware
dell vxrail_e665
dell vxrail_e665f_firmware
dell vxrail_e665f
dell vxrail_e665n_firmware
dell vxrail_e665n
dell vxrail_g560_firmware
dell vxrail_g560
dell vxrail_g560_vcf_firmware
dell vxrail_g560_vcf
dell vxrail_g560f_firmware
dell vxrail_g560f
dell vxrail_p470_firmware
dell vxrail_p470
dell vxrail_p570_firmware
dell vxrail_p570
dell vxrail_p570_vcf_firmware
dell vxrail_p570_vcf
dell vxrail_p570f_firmware
dell vxrail_p570f
dell vxrail_p570f_vcf_firmware
dell vxrail_p570f_vcf
dell vxrail_p580n_firmware
dell vxrail_p580n
dell vxrail_p580n_vcf_firmware
dell vxrail_p580n_vcf
dell vxrail_p670f_firmware
dell vxrail_p670f
dell vxrail_p670n_firmware
dell vxrail_p670n
dell vxrail_p675f_firmware
dell vxrail_p675f
dell vxrail_p675n_firmware
dell vxrail_p675n
dell vxrail_s470_firmware
dell vxrail_s470
dell vxrail_s570_firmware
dell vxrail_s570
dell vxrail_s570_vcf_firmware
dell vxrail_s570_vcf
dell vxrail_s670_firmware
dell vxrail_s670
dell vxrail_v470_firmware
dell vxrail_v470
dell vxrail_v570_firmware
dell vxrail_v570
dell vxrail_v570_vcf_firmware
dell vxrail_v570_vcf
dell vxrail_v670f_firmware
dell vxrail_v670f
dell vxrail_vd-4000r_firmware
dell vxrail_vd-4000r
dell vxrail_vd-4000w_firmware
dell vxrail_vd-4000w
dell vxrail_vd-4000z_firmware
dell vxrail_vd-4000z
dell vxrail_vd-4510c_firmware
dell vxrail_vd-4510c
dell vxrail_vd-4520c_firmware
dell vxrail_vd-4520c

References

Frequently Asked Questions

What is CVE-2025-21111? +
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2025-21111? +
CVE-2025-21111 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-21111? +
CVE-2025-21111 affects products from dell, specifically: vxrail_d560, vxrail_d560_firmware, vxrail_d560f, vxrail_d560f_firmware, vxrail_e460, vxrail_e460_firmware, vxrail_e560, vxrail_e560_firmware, vxrail_e560_vcf, vxrail_e560_vcf_firmware, vxrail_e560f, vxrail_e560f_firmware, vxrail_e560f_vcf, vxrail_e560f_vcf_firmware, vxrail_e560n, vxrail_e560n_firmware, vxrail_e560n_vcf, vxrail_e560n_vcf_firmware, vxrail_e660, vxrail_e660_firmware, vxrail_e660f, vxrail_e660f_firmware, vxrail_e660n, vxrail_e660n_firmware, vxrail_e665, vxrail_e665_firmware, vxrail_e665f, vxrail_e665f_firmware, vxrail_e665n, vxrail_e665n_firmware, vxrail_g560, vxrail_g560_firmware, vxrail_g560_vcf, vxrail_g560_vcf_firmware, vxrail_g560f, vxrail_g560f_firmware, vxrail_p470, vxrail_p470_firmware, vxrail_p570, vxrail_p570_firmware, vxrail_p570_vcf, vxrail_p570_vcf_firmware, vxrail_p570f, vxrail_p570f_firmware, vxrail_p570f_vcf, vxrail_p570f_vcf_firmware, vxrail_p580n, vxrail_p580n_firmware, vxrail_p580n_vcf, vxrail_p580n_vcf_firmware, vxrail_p670f, vxrail_p670f_firmware, vxrail_p670n, vxrail_p670n_firmware, vxrail_p675f, vxrail_p675f_firmware, vxrail_p675n, vxrail_p675n_firmware, vxrail_s470, vxrail_s470_firmware, vxrail_s570, vxrail_s570_firmware, vxrail_s570_vcf, vxrail_s570_vcf_firmware, vxrail_s670, vxrail_s670_firmware, vxrail_v470, vxrail_v470_firmware, vxrail_v570, vxrail_v570_firmware, vxrail_v570_vcf, vxrail_v570_vcf_firmware, vxrail_v670f, vxrail_v670f_firmware, vxrail_vd-4000r, vxrail_vd-4000r_firmware, vxrail_vd-4000w, vxrail_vd-4000w_firmware, vxrail_vd-4000z, vxrail_vd-4000z_firmware, vxrail_vd-4510c, vxrail_vd-4510c_firmware, vxrail_vd-4520c, vxrail_vd-4520c_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-21111? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-21111 — free, no signup required.