CVE-2025-26336 — Dell / Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2

Description (CNA)

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected (CNA)

Vendor / product	Versions
Dell / Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2	affected N/A before 2.40.200.202101130302
Dell / Dell Chassis Management Controller (CMC) for PowerEdge VRTX	affected N/A before 3.41.200.202209300499

CWE

CWE-121

References

https://www.dell.com/support/kbdoc/en-us/000297463/dsa-2025-123-security-update-for-dell-chassis-management-controller-firmware-for-dell-poweredge-fx2-and-vrtx-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.