CVE-2025-36572

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-36572
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*
OR cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*
History

09 Jun 2025, 18:58

Type Values Removed Values Added
CPE cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*
Summary
  • (es) Dell PowerStore, versión 4.0.0.0, contiene una vulnerabilidad de uso de credenciales codificadas en el archivo de imagen de PowerStore. Un atacante con pocos privilegios y acceso remoto, conociendo las credenciales codificadas, podría explotar esta vulnerabilidad para obtener acceso no autorizado basándose en los privilegios de la cuenta codificada.
References () https://www.dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities - Vendor Advisory
First Time Dell powerstore 1000t
Dell
Dell powerstore 9000t
Dell powerstore 7000t
Dell powerstore 5200t
Dell powerstore 500t
Dell powerstore 1200t
Dell powerstore 9200t
Dell powerstore 5000t
Dell powerstore 3200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstoreos

28 May 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-28 17:15

Updated : 2025-06-09 18:58

NVD link : CVE-2025-36572

Mitre link : CVE-2025-36572

CVE.ORG link : CVE-2025-36572

JSON object : View

Products Affected

dell

  • powerstore_9200t
  • powerstore_3200t
  • powerstore_5000t
  • powerstore_1000t
  • powerstore_500t
  • powerstoreos
  • powerstore_3000t
  • powerstore_3200q
  • powerstore_7000t
  • powerstore_9000t
  • powerstore_5200t
  • powerstore_1200t
CWE
CWE-798

Use of Hard-coded Credentials