Severity
Medium
Analysis Summary
CVE-2025-27686 CVSS:2.7
Dell Unisphere for PowerMax and PowerMax versions before 10.2.0.9 and 9.2.4.15 have a serious security weakness in their LDAP query handling. This vulnerability allows a high-privileged remote attacker to potentially perform script injection by improperly neutralizing special elements in an LDAP query. The flaw could enable an attacker to manipulate LDAP queries in a way that compromises the system's security, potentially granting unauthorized access or executing malicious scripts.
CVE-2025-29988 CVSS:6.9
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
Impact
- Gain Access
- Code Execution
Indicators of Compromise
CVE
CVE-2025-27686
CVE-2025-29988
Affected Vendors
- Dell
Affected Products
- Dell Client Platform BIOS
- Dell Unisphere for Powermax
Remediation
Refer to Dell Security Advisory for patch, upgrade, or suggested workaround information.