CVE-2025-32745 describes an improper certificate validation vulnerability in Dell PowerFlex Manager Appliance versions 4.6.2 and earlier. This vulnerability could be exploited by an unauthenticated attacker who has adjacent network access to the affected system, potentially enabling information tampering. The CVSS 3.1 base score is 4.2, reflecting low confidentiality and integrity impact, no availability impact, high attack complexity, no privileges required, and no user interaction needed. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability could allow an attacker on an adjacent network to tamper with information due to improper certificate validation. The impact is limited to confidentiality and integrity with no availability impact. The medium severity rating reflects the moderate risk posed by this vulnerability given the required attack conditions and impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict adjacent network access to the Dell PowerFlex Manager Appliance where possible to reduce exposure. Monitor vendor communications for updates on patches or mitigations.