Medium severity5.3NVD Advisory· Published May 22, 2026· Updated May 22, 2026
CVE-2025-32747
CVE-2025-32747
Description
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:dell:powerflex_appliance_intelligent_catalog:*:*:*:*:*:*:*:*Range: <48.383.00
cpe:2.3:a:dell:powerflex_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dell:powerflex_manager:*:*:*:*:*:*:*:*range: <=4.6.2
- (no CPE)range: <=4.6.2
Patches
Vulnerability mechanics
References
2- www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilitiesnvdVendor Advisory
- www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilitiesnvdVendor Advisory
News mentions
1- Dell Discloses 13 CVEs Across PowerFlex, ECS, VxRail, and MoreVypr Intelligence · May 22, 2026