Vulnerability · Published Mar 21, 2025 · Assigned by dell

CVE-2025-26336

High 8.3

In plain English

A high-severity stack buffer overflow in Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2 from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.6%top 48.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected products (as reported)

Vendor	Product	Versions
Dell	Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2	N/A – before 2.40.200.202101130302
Dell	Dell Chassis Management Controller (CMC) for PowerEdge VRTX	N/A – before 3.41.200.202209300499

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

References

https://www.dell.com/support/kbdoc/en-us/000297463/dsa-2025-123-security-update-for-dell-chassis-management-controller-firmware-for-dell-poweredge-fx2-and-vrtx-vulnerabilities vendor-advisory