Dell PowerFlex Manager versions up to 4.6.2 are affected by an Improper Certificate Validation flaw that can allow an unauthenticated attacker with adjacent network access to tamper with information. The vulnerability arises when the Manager accepts certificates that have not been properly verified, enabling a malicious actor to modify data or configuration that the Manager processes. The impact is limited to information tampering rather than full system compromise.

Dell PowerFlex Manager, including the appliance and rack variants, with affected versions up to and including 4.6.2. Users of PowerFlex Manager in any of these deployments should check their installed version and apply the update when available.

The CVSS score of 4.2 indicates a low‑to‑moderate risk, and the vulnerability requires no authentication other than proximity to the network. EPSS data is not available, and the issue is not listed in the CISA KEV catalog, suggesting that exploitation in the wild is currently unreported. However, because the flaw permits manipulation of information, any adjacent attacker could succeed if the network is compromised.