← Back

CVE-2026-49502

nvd nist
Published: Jun 17, 2026Modified: Jun 25, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.

Affected (2)

Dell
1 product
Powerflex Manager
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Powerflex Manager
Before 4.5.5.2
Powerflex Manager
From 4.6.0 to 5.1.0.1

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.