Dell PowerFlex Rack
CVE-2025-32748
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Network-accessible unauthenticated endpoint (AV:N/PR:N); redirect yields limited confidentiality exposure only (C:L); victim must follow the redirect (UI:R); no integrity or availability impact applies.
Primary rating from Vendor (dell).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to trigger redirections.
AnalysisAI
Host Header Injection in Dell PowerFlex Rack RCM 3.7 enables unauthenticated remote attackers to trigger open redirects by supplying a forged HTTP Host header, potentially redirecting victim users to attacker-controlled sites for phishing or credential harvesting. The CVSS 4.3 Medium score reflects the requirement for user interaction (UI:R) and limited confidentiality impact, with no integrity or availability consequence. No public exploit code has been identified at time of analysis, and the vulnerability has no CISA KEV listing.
Technical ContextAI
Dell PowerFlex Rack is a hyperconverged infrastructure platform; the affected component is its Rack Configuration Manager (RCM) at version 3.7. CWE-601 (URL Redirection to Untrusted Site / Open Redirect) identifies the root cause: the RCM web interface incorporates the HTTP Host header - a client-controlled value - into server-generated redirect responses without adequate validation or allowlisting. When the application constructs redirect URLs (e.g., during login, logout, or password-reset flows) from the untrusted Host header, an attacker can substitute an arbitrary domain, causing the server to issue a 3xx redirect pointing to an attacker-controlled site. The CPE string cpe:2.3:a:dell:powerflex_rack:*:*:*:*:*:*:*:* uses a wildcard version field, indicating NVD has not independently constrained the affected range beyond the vendor-stated RCM 3.7.
RemediationAI
Consult the Dell security advisory at https://www.dell.com/support/kbdoc/en-us/000059672/ifgroup-not-working-correctly-when-ip-range-is-used for the authoritative patch guidance; a specific fixed version number is not independently confirmed from the available input data - patch status is 'available per vendor advisory.' As a compensating control, restrict network access to the PowerFlex Rack RCM management interface using firewall rules or network segmentation so that only trusted administrative subnets can reach the web console, significantly reducing attacker ability to deliver forged Host header requests to the server. Ensure administrative users access RCM only via bookmarked, internally-distributed URLs rather than links received in email or chat, reducing susceptibility to redirect-based phishing. Where the platform supports it, configure a reverse proxy or load balancer to enforce a strict Host header allowlist, rejecting requests whose Host value does not match the authoritative management hostname.
More in Open Redirect
View allA malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
GFI Kerio Control versions 9.2.5 through 9.4.5 contain an HTTP response splitting vulnerability in the dest parameter of
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 b
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3
Flarum is open source discussion platform software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exp
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites
Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for
Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. Rated crit
Share
External POC / Exploit Code
Leaving vuln.today