Riskcovery

CVE-2025-0051

FlashArray DOS Vulnerability

State
Published
Severity
8.7 High
Published
Jun 10, 2025
Updated
Jun 11, 2025
Reserved
Dec 4, 2024

Read the record on cve.org

Description

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NPureStorage

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
FlashArrayPure Storage
  • 5.0.0 through 5.0.11Affectedfrom security-patch-fa-2025-ANot affected
  • 5.1.1 through 5.1.17Affectedfrom security-patch-fa-2025-ANot affected
  • 5.2.0 through 5.2.7Affectedfrom security-patch-fa-2025-ANot affected
  • 5.3.0 through 5.3.21Affectedfrom security-patch-fa-2025-ANot affected
  • 6.0.0 through 6.0.9Affectedfrom security-patch-fa-2025-ANot affected
  • 6.1.0 through 6.1.25Affectedfrom security-patch-fa-2025-ANot affected
  • 6.2.0 through 6.2.17Affectedfrom security-patch-fa-2025-ANot affected
  • 6.3.0 through 6.3.20Affectedfrom security-patch-fa-2025-ANot affected
  • 6.4.0 through 6.4.10Affectedfrom security-patch-fa-2025-ANot affected
  • 6.5.0 through 6.5.9Affectedfrom security-patch-fa-2025-ANot affected
  • 6.6.0 through 6.6.11Affectedfrom security-patch-fa-2025-ANot affected
  • 6.7.0 through 6.7.1Affectedfrom security-patch-fa-2025-ANot affected
  • 6.8.0 through 6.8.2Affectedfrom security-patch-fa-2025-ANot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.