CVE-2025-26336: Buffer Overflow
Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Chassis Management Controller Firmware for Dell PowerEdge FX2to a version that resolves this vulnerability.Fixed in 2.40.200.202101130302 - Upgrade
Upgrade
Dell Chassis Management Controller Firmware for Dell PowerEdge VRTXto a version that resolves this vulnerability.Fixed in 3.41.200.202209300499
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26336?
CVE-2025-26336 has been rated as a high severity vulnerability due to its potential for unauthenticated access and exploitation.
How do I fix CVE-2025-26336?
To fix CVE-2025-26336, update the Dell Chassis Management Controller Firmware for PowerEdge FX2 to version 2.40.200.202101130302 or later, and PowerEdge VRTX to version 3.41.200.202209300499 or later.
What types of systems are affected by CVE-2025-26336?
CVE-2025-26336 affects the Dell Chassis Management Controller Firmware for PowerEdge FX2 and PowerEdge VRTX versions prior to the specified updates.
What is a Stack-based Buffer Overflow vulnerability in CVE-2025-26336?
A Stack-based Buffer Overflow vulnerability like that in CVE-2025-26336 occurs when the program writes more data to a buffer on the stack than it can hold, potentially allowing an attacker to execute arbitrary code.
Is CVE-2025-26336 an unauthenticated vulnerability?
Yes, CVE-2025-26336 is classified as an unauthenticated vulnerability, allowing an attacker to exploit it without needing valid user credentials.