What is the CVSS score of EUVD-2025-201499?

EUVD-2025-201499 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

Which versions of Cloudboost Virtual Appliance are affected by EUVD-2025-201499?

Dell CloudBoost Virtual Appliance versions 19.13.0.0 and earlier contain a brute-force vulnerability that allows unauthenticated remote attackers to gain unauthorized access by bypassing account…. A patch is available.

How to fix or mitigate EUVD-2025-201499?

Within 24 hours: Identify all CloudBoost Virtual Appliance instances and document current versions. Within 7 days: Apply vendor-released patch to upgrade affected systems (versions 19.13.0.0 and prior) to patched release. Within 30 days: Conduct access log review for suspicious authentication attempts and verify no unauthorized access occurred during exposure window.

Cloudboost Virtual Appliance EUVD-2025-201499

| CVE-2025-46603 HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2025-12-05 security_alert@emc.com

Authentication Bypass Dell Cloudboost Virtual Appliance

7.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:23 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

19.13.0.2

EUVD ID Assigned

Mar 15, 2026 - 17:08 euvd

EUVD-2025-201499

Analysis Generated

Mar 15, 2026 - 17:08 vuln.today

CVE Published

Dec 05, 2025 - 19:15 nvd

HIGH 7.0

DescriptionCVE.org

Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.