✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Multiple D-Link DIR-600L Vulnerabilities

May 7, 2025
Rewterz

CVE-2025-45492 – Netgear EX8000 Vulnerability

May 7, 2025

Multiple Dell Storage Manager Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2025-22476 CVSS:5.5

Dell Storage Center - Dell Storage Manager contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2025-22477 CVSS:8.3

Dell Storage Center - Dell Storage Manager contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2025-22478 CVSS:8.1

Dell Storage Center - Dell Storage Manager, contains an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

CVE-2025-22479 CVSS:3.5

Dell Storage Center - Dell Storage Manager, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.

CVE-2025-23379 CVSS:3.5

Dell Storage Center - Dell Storage Manager contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.

Impact

  • Information Disclosure
  • Data Manipulation
  • Cross-Site Scripting
  • Privilege Escalation

Indicators of Compromise

CVE

  • CVE-2025-22476

  • CVE-2025-22477

  • CVE-2025-22478

  • CVE-2025-22479

  • CVE-2025-23379

Affected Vendors

  • Dell

Affected Products

  • Dell Storage Manager - 20.1.20

Remediation

Refer to the Dell Security Advisory for patch, upgrade, or suggested workaround information.

Dell Security Advisory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo