PT-2025-23097 · Dell · Dell Powerstore

CVE-2025-36572 · Publicado 2025-05-28 · Atualizado 2025-05-28

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerStore version 4.0.0.0

Description The issue concerns the use of hard-coded credentials in the PowerStore image file. A low-privileged attacker with remote access and knowledge of these credentials could exploit this to gain unauthorized access based on the hardcoded account's privileges.

Recommendations For version 4.0.0.0, consider changing the hard-coded credentials to unique, strong passwords to prevent unauthorized access. As a temporary workaround, restrict remote access to the PowerStore image file until a patch is available.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2025-10457

CVE-2025-36572

Produtos afetados

Dell Powerstore

Referências · 7

• https://dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1927768997660913688 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-36572 · Nota de Segurança
• https://t.me/cvetracker/24834 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1927803871092441232 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-36572 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-10457 · Nota de Segurança