What is the CVSS score of CVE-2025-46603?

CVE-2025-46603 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

Which versions of Cloudboost Virtual Appliance are affected by CVE-2025-46603?

Dell CloudBoost Virtual Appliance versions 19.13.0.0 and earlier contain a brute-force vulnerability that allows unauthenticated remote attackers to gain unauthorized access by bypassing account…. A patch is available.

How to fix or mitigate CVE-2025-46603?

Within 24 hours: Identify all CloudBoost Virtual Appliance instances and document current versions. Within 7 days: Apply vendor-released patch to upgrade affected systems (versions 19.13.0.0 and prior) to patched release. Within 30 days: Conduct access log review for suspicious authentication attempts and verify no unauthorized access occurred during exposure window.

Cloudboost Virtual Appliance CVE-2025-46603

EUVD-2025-201499 HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2025-12-05 security_alert@emc.com

Authentication Bypass Dell Cloudboost Virtual Appliance

7.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:23 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

19.13.0.2

EUVD ID Assigned

Mar 15, 2026 - 17:08 euvd

EUVD-2025-201499

Analysis Generated

Mar 15, 2026 - 17:08 vuln.today

CVE Published

Dec 05, 2025 - 19:15 nvd

HIGH 7.0

DescriptionNVD

Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Analysis

Technical ContextAI

This vulnerability is classified as Improper Restriction of Excessive Authentication Attempts (CWE-307).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More from same product – last 7 days

CVE-2025-26483 MEDIUM This Month

6.1 May 22

Open redirect vulnerability in Dell PowerFlex Manager 4.6.2 and prior enables unauthenticated remote attackers to craft

CVE-2025-32751 MEDIUM This Month

5.5 May 22

Dell PowerFlex Manager versions 4.6.2 and earlier improperly store sensitive information in a manner accessible to low-p

CVE-2025-32747 MEDIUM This Month

5.3 May 22

Incorrect Privilege Assignment in Dell PowerFlex Manager version 4.6.2 and earlier (both Appliance and Rack form factors

CVE-2025-32749 MEDIUM This Month

5.3 May 22

Directory listing exposure in Dell PowerFlex Manager versions 4.6.2 and earlier allows an attacker to enumerate director

CVE-2025-32745 MEDIUM This Month

4.2 May 22

Improper certificate validation in Dell PowerFlex Manager version 4.6.2 and earlier allows an unauthenticated attacker o

CVE-2025-46603 vulnerability details – vuln.today

Back