by Kastro
Paper/Archive/CVE-2025-26336

CVE-2025-26336

Dell Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2 — Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Managemen…

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.9.509 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected

ProductAffectedFixed inSource
Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2N/A – < 2.40.200.2021011303022.40.200.202101130302CNA
Dell Chassis Management Controller (CMC) for PowerEdge VRTXN/A – < 3.41.200.2022093004993.41.200.202209300499CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dell (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000297463/dsa-2025-123-security-update-for-dell-chassis-management-controller-firmware-for-dell-poweredge-fx2-and-vrtx-vulnerabilities