Vulnerability in Quantum Stornext
CVE-2025-46617
Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.
EPSS: 0.003 (20.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N.
Affected products
- Quantum Stornext — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-46617?
- CVE-2025-46617 is a high-severity vulnerability in Quantum Stornext, classified under Use of Hard-coded Credentials. CVSS score: 7.2/10. Published 2025-04-25.
- How severe is CVE-2025-46617?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2025-46617 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.