CVE-2025-21111
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password...
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
- Record
CVE-2025-21111- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-256
- Updated
- 2026-11-02
EUVDEUVD-2025-2226
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
- Record
EUVD-2025-2226- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5c45-mgcf-3hhj
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password...
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
- Record
GHSA-5c45-mgcf-3hhj- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-256, CWE-522
- Updated
- 2026-11-02
NVD
Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
- Record
CVE-2025-21111- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-256, CWE-522
- Updated
- 2026-11-02
Affected products
- dell vxrail hci
- dell vxrail d560 firmware
- dell vxrail d560f firmware
- dell vxrail e460 firmware
- dell vxrail e560 firmware
- dell vxrail e560 vcf firmware
- dell vxrail e560f firmware
- dell vxrail e560f vcf firmware
- dell vxrail e560n firmware
- dell vxrail e560n vcf firmware
- dell vxrail e660 firmware
- dell vxrail e660f firmware
Show 31 moreShow less
- dell vxrail e660n firmware
- dell vxrail e665 firmware
- dell vxrail e665f firmware
- dell vxrail e665n firmware
- dell vxrail g560 firmware
- dell vxrail g560 vcf firmware
- dell vxrail g560f firmware
- dell vxrail p470 firmware
- dell vxrail p570 firmware
- dell vxrail p570 vcf firmware
- dell vxrail p570f firmware
- dell vxrail p570f vcf firmware
- dell vxrail p580n firmware
- dell vxrail p580n vcf firmware
- dell vxrail p670f firmware
- dell vxrail p670n firmware
- dell vxrail p675f firmware
- dell vxrail p675n firmware
- dell vxrail s470 firmware
- dell vxrail s570 firmware
- dell vxrail s570 vcf firmware
- dell vxrail s670 firmware
- dell vxrail v470 firmware
- dell vxrail v570 firmware
- dell vxrail v570 vcf firmware
- dell vxrail v670f firmware
- dell vxrail vd-4000r firmware
- dell vxrail vd-4000w firmware
- dell vxrail vd-4000z firmware
- dell vxrail vd-4510c firmware
- dell vxrail vd-4520c firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-21111 is a high vulnerability (CVSS 7.5) in Dell Vxrail Hci, published January 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. No source names a fixed version.