Dell PowerFlex Manager has an Improper Access Control flaw described as CWE-284. A low privileged attacker who can reach the system over the network may use this weakness to trigger a denial of service, disrupting the availability of the PowerFlex management services. The impact statement is limited to service interruption; no compromise of data confidentiality or integrity is disclosed in the available information.

The vulnerability affects Dell PowerFlex software, specifically the PowerFlex Manager component. Exact sub‑versions are not enumerated in the data, but it applies to all released PowerFlex Manager versions at the time of the advisory.

The CVSS score of 7.1 indicates a moderate to high severity. The EPSS score is less than 1%, suggesting that, while the flaw is real, its exploitation likelihood on the internet is low. The vulnerability is not listed in the CISA KEV catalog, implying it has not yet been confirmed as broadly exploited in the field. The likely attack vector is remote, requiring network connectivity to the PowerFlex Manager interface, and the attacker needs only low privileges to push the denial of service.