CVE-2025-30105

Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:dell:techadvisor::::::::
	cpe:2.3:a:dell:xtremio_management_server::::::::

cpe:2.3:h:dell:xtremio_x2:-:*:*:*:*:*:*:*

History

14 Jan 2026, 18:12

Type	Values Removed	Values Added
First Time		Dell xtremio X2 Dell techadvisor Dell Dell xtremio Management Server
References	~~() https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2 -~~	() https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2 - Vendor Advisory
CPE		cpe:2.3:a:dell:techadvisor:::::::: cpe:2.3:h:dell:xtremio_x2:-:::::::* cpe:2.3:a:dell:xtremio_management_server::::::::

31 Jul 2025, 18:42

Type	Values Removed	Values Added
Summary		(es) Dell XtremIO, versión 6.4.0-22, presenta una vulnerabilidad de inserción de información confidencial en el archivo de registro. Un atacante con pocos privilegios y acceso local podría explotar esta vulnerabilidad, lo que provocaría la exposición de la información. El atacante podría usar las credenciales expuestas para acceder a la aplicación vulnerable con los privilegios de la cuenta comprometida.

30 Jul 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-30 18:15

Updated : 2026-01-14 18:12

NVD link : CVE-2025-30105

Mitre link : CVE-2025-30105

CVE.ORG link : CVE-2025-30105

JSON object : View

Products Affected

dell

xtremio_x2
xtremio_management_server
techadvisor

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2025-30105", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2025-07-30T18:15:30.690", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account."}, {"lang": "es", "value": "Dell XtremIO, versi\u00f3n 6.4.0-22, presenta una vulnerabilidad de inserci\u00f3n de informaci\u00f3n confidencial en el archivo de registro. Un atacante con pocos privilegios y acceso local podr\u00eda explotar esta vulnerabilidad, lo que provocar\u00eda la exposici\u00f3n de la informaci\u00f3n. El atacante podr\u00eda usar las credenciales expuestas para acceder a la aplicaci\u00f3n vulnerable con los privilegios de la cuenta comprometida."}], "lastModified": "2026-01-14T18:12:43.360", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:techadvisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "935AE67B-155C-4BB0-BBE7-67FE8A122249", "versionEndExcluding": "3.4", "versionStartIncluding": "2.6"}, {"criteria": "cpe:2.3:a:dell:xtremio_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC255AF1-D3FB-4E2D-8806-92400A7127E9", "versionEndExcluding": "6.4.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dell:xtremio_x2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "31A977D9-77DA-4FF3-9963-1F93B09961D1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security_alert@emc.com"}