CVE-2025-26336

· HIGHAnalyzed

← All CVEs

CVSS v3.1

8.3

EPSS

0.59%

Published

Mar 21, 2025

Modified

Mar 27, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

Weaknesses (CWE)

CWE-121CWE-787

Affected Products (4)

dell · chassis_management_controller_for_poweredge_fx2_firmware (up to 2.40.200.202101130302)vulnerable

dell · chassis_management_controller_for_poweredge_fx2

dell · chassis_management_controller_for_poweredge_vrtx_firmware (up to 3.41.200.202209300499)vulnerable

dell · chassis_management_controller_for_poweredge_vrtx

References (1)

https://www.dell.com/support/kbdoc/en-us/000297463/dsa-2025-123-security-update-for-dell-chassis-management-controller-firmware-for-dell-poweredge-fx2-and-vrtx-vulnerabilities

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs