CVE-2025-32748 describes a Host Header Injection vulnerability in Dell PowerFlex rack RCM 3.7. This vulnerability enables unauthenticated remote attackers to exploit open redirect behavior by manipulating URL redirections. The issue falls under CWE-601, which involves URL redirection to untrusted sites. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. No official fix or remediation level has been published by Dell as of the current data.

An unauthenticated attacker with remote network access could exploit this vulnerability to redirect users to potentially malicious or untrusted websites. This could facilitate phishing or social engineering attacks by misleading users through crafted URLs. The confidentiality impact is low, with no integrity or availability impacts reported. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of unexpected redirects when interacting with Dell PowerFlex rack interfaces. Monitoring for updates from Dell is recommended.