CVE-2025-21102 Information disclosure in Dell VxRail HCI
A local high-privileged attacker can access stored passwords in plaintext, leading to information exposure in Dell VxRail systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-21102?
CVE-2025-21102 is a high-severity vulnerability in Dell VxRail HCI, published on 8 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Which versions are affected by CVE-2025-21102?
It affects 42 products.
Products include Dell Vxrail D560 Firmware, Dell Vxrail D560f Firmware, Dell Vxrail E460 Firmware, Dell Vxrail E560 Firmware, Dell Vxrail E560 Vcf Firmware, Dell Vxrail E560f Firmware and 36 more.
How do I fix CVE-2025-21102?
No fix has been published for CVE-2025-21102 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-21102 being exploited?
There is no known exploitation of CVE-2025-21102 in the wild and no public exploit code.
Other vulnerabilities in Dell VxRail HCI
Sources
Also known as GHSA-jvmq-2wfh-h2cw.