CVE-2025-32750 is an information exposure vulnerability in Dell PowerFlex Manager (Appliance) versions up to 4.6.2. It arises from improper access controls that allow directory listing by unauthenticated remote attackers, leading to potential disclosure of sensitive information. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting high confidentiality impact with no required privileges or user interaction. No vendor-provided patch or official remediation level is currently documented, and the product is not a cloud service, so remediation depends on vendor updates.

An unauthenticated remote attacker can exploit this vulnerability to gain unauthorized access to directory listings, potentially exposing sensitive information. The impact is limited to confidentiality; integrity and availability are not affected. This could lead to information disclosure that may aid further attacks or data leakage.

Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected Dell PowerFlex Manager appliance and monitor for unusual access patterns. Avoid exposing the management interface to untrusted networks.