PT-2025-23097 · Dell · Dell Powerstore

Published 2025-05-28 · Updated 2025-05-28 · CVE-2025-36572

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerStore version 4.0.0.0

Description The issue concerns the use of hard-coded credentials in the PowerStore image file. A low-privileged attacker with remote access and knowledge of these credentials could exploit this to gain unauthorized access based on the hardcoded account's privileges.

Recommendations For version 4.0.0.0, consider changing the hard-coded credentials to unique, strong passwords to prevent unauthorized access. As a temporary workaround, restrict remote access to the PowerStore image file until a patch is available.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2025-10457

CVE-2025-36572

Affected Products

Dell Powerstore

References · 7

• https://dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36572 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36572 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10457 · Security Note
• https://twitter.com/CVEnew/status/1927768997660913688 · Twitter Post
• https://t.me/cvetracker/24834 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1927803871092441232 · Twitter Post