CVE-2025-30475 is a high severity (CVSS 8.1) improper privilege management flaw in Dell PowerScale InsightIQ versions 5.0 through 5.2. An unauthenticated attacker with remote access could potentially gain elevated privileges. Dell advisory DSA-2025-186 describes the update, so read it for the fixed version and apply it on every affected system.
What's affected
The record lists Dell PowerScale InsightIQ versions 5.0 through 5.2 as affected.
Dell's advisory is DSA-2025-186, titled as a security update for Dell PowerScale InsightIQ covering multiple vulnerabilities. I could not open the page, as Dell's site denied the request, so I cannot name the fixed version. Open the advisory and use the version it gives.
The record says that an unauthenticated attacker with remote access could potentially exploit the flaw. It does not flag the CVE as known exploited (not in the CISA KEV catalog at the time of writing).
How to check if you're exposed
InsightIQ is the monitoring and reporting tool for Dell PowerScale storage.
- Sign in to the InsightIQ web interface and find the product version in the about or system information view.
- If it is between 5.0 and 5.2, you are in scope.
- Compare with the fixed version in DSA-2025-186.
Also check which networks can reach the InsightIQ server and whether it is exposed beyond your management network.
What to do now
- Open Dell advisory DSA-2025-186 and read the affected and fixed versions.
- Upgrade InsightIQ to the fixed version using Dell's documented procedure.
- Restrict access to the InsightIQ interface to the management network.
- Review InsightIQ user accounts and any recent configuration changes.
- Read the rest of the advisory, since it covers several vulnerabilities, and apply everything it lists.
Why it matters
The record maps the flaw to CWE-269 (Improper Privilege Management). The product does not manage or enforce privileges correctly, so an actor can end up with more rights than intended. The record gives no further detail, and I will not guess at the mechanism.
The vector explains the 8.1 score. It is reachable remotely and does not require login, but the record words the outcome as potential privilege escalation, and the attack is not trivial. A monitoring tool for storage has visibility into the whole storage cluster, so control of it is useful to an attacker.
Management tools like this are often forgotten in patch cycles. Include them in the inventory and keep them on a restricted network.
Quick check
Which version fixes it?
Check Dell advisory DSA-2025-186. I could not open it from here.
Is it exploited?
The record does not flag it as known exploited, and I found no source that says so.
Sources
Last reviewed: 19 October 2026.
