Dell PowerFlex Mgr <=4.6.2 Dir Listing Info Exposure
CVE-2025-32749 Published on May 22, 2026
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Vulnerability Analysis
CVE-2025-32749 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.
Weakness Type
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
Affected Versions
Dell PowerFlex Manager (Appliance):- Before IC 48.378.00 is affected.
- Before IC 48.383.00 is affected.
- Before 3.7.8.0 is affected.
- Before 3.8.3.0 is affected.
- Before and including 4.6.2 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.