Medium severity6.5NVD Advisory· Published Jun 17, 2026· Updated Jun 22, 2026

CVE-2024-47477

Description

Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack in tandem with DNS cache poisoning.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Powerflex Manager2 versions
cpe:2.3:a:dell:powerflex_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dell:powerflex_manager:*:*:*:*:*:*:*:*range: <4.5.1.1
- (no CPE)range: <4.5.1.1

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000477538/dsa-2026-066-security-update-for-powerflex-software-multiple-vulnerabilitiesnvdVendor Advisory

News mentions

Dell PowerFlex Manager: 11 CVEs Disclosed in Single-Day Advisory Batch
Vypr Intelligence · Jun 17, 2026

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000