CVE-2025-46603CWE-307

Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability

High · published December 5, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

⚡ Just a few wrong guesses could let an attacker sneak right into your system! The Dell CloudBoost Virtual Appliance is vulnerable to a high-risk authentication flaw that could open the door to unauthorized access. 🔒 Think of it like a hotel with no front desk staff checking IDs — anyone can walk in, make a mess, and help themselves to your valuables without raising an eyebrow. This vulnerability allows just that kind of access for attackers! If exploited, this vulnerability could enable an attacker to gain unauthorized access to sensitive data and potentially compromise your entire cloud infrastructure. Imagine someone sifting through your files, making unauthorized changes, or locking you out completely — yikes!

Put simply

Think of it like a hotel with no front desk staff checking IDs — anyone can walk in, make a mess, and help themselves to your valuables without raising an eyebrow. This vulnerability allows just that kind of access for attackers! This vulnerability arises from an improper restriction on excessive authentication attempts, allowing an unauthenticated attacker to launch brute-force attacks from a remote location, bypassing security checks.

What to do

If exploited, this vulnerability could enable an attacker to gain unauthorized access to sensitive data and potentially compromise your entire cloud infrastructure. Imagine someone sifting through your files, making unauthorized changes, or locking you out completely — yikes! To safeguard your systems, immediately update the Dell CloudBoost Virtual Appliance to version 19.13.0.1 or later. Additionally, consider implementing rate limiting on authentication attempts to thwart would-be attackers. Regularly audit access logs for unusual activity as well! You've got this! Take these steps to fortify your defenses and keep those intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-12-05T19:01Z
EPSS history
Timeline
  • 05 DEC 19:01Z
    Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability
    cvelistv5