CVE-2025-45376 | THREATINT

Description

Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

PUBLISHED Reserved 2025-04-22 | Published 2025-09-29 | Updated 2025-10-01 | Assigner dell

HIGH: 7.5CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges

Product status

Default status

unaffected

3.4.7 (semver) before 3.4.9

affected

Credits

Dell would like to thank Ouallaout Noureddine for reporting this issue finder

References

www.dell.com/...te-for-dell-repository-manager-vulnerability vendor-advisory

cve.org (CVE-2025-45376)

nvd.nist.gov (CVE-2025-45376)

Download JSON