CVE-2025-21111 Information disclosure in Dell VxRail HCI
A local high-privileged attacker can access plaintext stored passwords in Dell VxRail, leading to information exposure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-21111?
CVE-2025-21111 is a high-severity vulnerability in Dell VxRail HCI, published on 8 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Which versions are affected by CVE-2025-21111?
It affects 42 products.
Products include Dell Vxrail D560 Firmware, Dell Vxrail D560f Firmware, Dell Vxrail E460 Firmware, Dell Vxrail E560 Firmware, Dell Vxrail E560 Vcf Firmware, Dell Vxrail E560f Firmware and 36 more.
How do I fix CVE-2025-21111?
No fix has been published for CVE-2025-21111 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-21111 being exploited?
There is no known exploitation of CVE-2025-21111 in the wild and no public exploit code.
Other vulnerabilities in Dell VxRail HCI
Sources
Also known as GHSA-5c45-mgcf-3hhj.