CVE-2025-45376CWE-280

CVE-2025-45376

High · published September 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00104 · 1.0th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2025-09-30T01:15Z
Affected products (1)
ProductVersionsFixed in
dell/repository_manager≥ 3.4.7, < 3.4.93.4.9
References (1)
https://www.dell.com/support/kbdoc/en-us/000375461/dsa-2025-373-security-update-for-dell-repository-manager-vulnerability · [email protected]
EPSS history
Timeline
  • 29 SEP 20:13Z
    Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability
    cvelistv5