Dell vulnerabilities
Published CVEs affecting Dell products: 615 record(s), with severity, exploitation and fixes.
Secure Connect Gateway 107Secure Connect Gateway 5.0 - Appliance 104Secure Connect Gateway 5.0 - Application 103Data Domain Operating System 63Powerprotect Data Domain 49Policy Manager For Secure Connect Gateway 36Secure Connect Gateway SCG Policy Manager 36Powerscale Onefs 26OpenManage Server Administrator Managed Node for RHEL 9.4 23OpenManage Server Administrator Managed Node for RHEL 8.10 23Openmanage Server Administrator 23Powerflex Manager 23OpenManage Server Administrator Managed Node for SLES 15 23OpenManage Server Administrator Managed Node (Patch) for Windows 23Wyse Management Suite 22OpenManage Server Administrator Managed Node for Ubuntu 22.04 21Objectscale 20PowerStore 5200T 18PowerStore 500T 18PowerStore 3000T 18PowerStore 1000T 18PowerStore 7000T 18PowerStore 3200T 18PowerStore 3200Q 18PowerStore 1200T 18PowerStore 5200Q 18PowerStore 9000T 18PowerStore 5000T 18PowerStore 9200T 17Powerprotect Dp Series Appliance 17Powerprotect Data Manager 15ThinOS 10 15Powerstoreos 14Container Storage Modules 12Thinos 11Dell Command Update (DCU) 11Unisphere For Powermax 11Elastic Cloud Storage 11Command Update 11Display And Peripheral Manager 11
CVE-2025-45376
High · 7.8
CWE-280 Sep 29, 2025
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling…
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2025-43993
High · 7.8
CWE-428 Sep 25, 2025
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions…
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
CVE-2025-43943
Medium · 6.7
CWE-78 Sep 25, 2025
OS Command Injection in Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVE-2025-26333
High · 7.5
CWE-209 Sep 25, 2025
Information Exposure Through an Error Message in Dell Bsafe Crypto-j
Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.
CVE-2025-36601
High · 7.5
CWE-200 Sep 25, 2025
Exposure of Sensitive Information in Dell Powerscale Onefs
Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2023-43086
High · 7.8
CWE-284 Nov 23, 2023
Improper Access Control in Dell Command|configure
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation.
CVE-2021-36343
Medium · 6.4
CWE-20 Jan 24, 2022
Improper Input Validation in Dell Precision 5820 Tower Firmware
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36342
Medium · 6.4
CWE-20 Jan 24, 2022
Improper Input Validation in Dell Precision 7510 Firmware
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36325
Medium · 6.7
CWE-20 Nov 12, 2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36324
Medium · 6.7
CWE-20 Nov 12, 2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36323
Medium · 6.7
CWE-20 Nov 12, 2021
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-21551
High · 7.8
KEV Urgent · 76 Public exploit CWE-782 May 4, 2021
Dell dbutil Driver Insufficient Access Control Vulnerability
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVE-2020-11899
Medium · 5.4
KEV High · 53 CWE-125 Jun 17, 2020
Treck TCP/IP stack Out-of-Bounds Read Vulnerability
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVE-2019-3740
Medium · 6.5
CWE-203 Sep 18, 2019
Observable Discrepancy in Dell Bsafe Cert-j
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
CVE-2019-3739
Medium · 6.5
CWE-310 Sep 18, 2019
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure…
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.