CVE-2025-36572

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

6.5

EPSS

0.27%

Published

May 28, 2025

Modified

Jun 9, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-798

Affected Products (12)

dell · powerstoreos (up to 4.0.1.3-2494147)vulnerable

dell · powerstore_1000t

dell · powerstore_1200t

dell · powerstore_3000t

dell · powerstore_3200q

dell · powerstore_3200t

dell · powerstore_5000t

dell · powerstore_500t

dell · powerstore_5200t

dell · powerstore_7000t

dell · powerstore_9000t

dell · powerstore_9200t

References (1)

https://www.dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs