PT-2025-27526 · Dell · Dell Networker

Published 2025-07-01 · Updated 2025-08-14 · CVE-2025-36582

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.12.0.1 and prior

Description: The issue is related to a Selection of Less-Secure Algorithm During Negotiation, also known as an 'Algorithm Downgrade'. This could allow an unauthenticated attacker with remote access to potentially exploit the issue, leading to information disclosure.

Recommendations: For versions 19.12.0.1 and prior, update to a version that contains a fix for this issue to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-757

Related Identifiers

BDU:2025-09525

CVE-2025-36582

Affected Products

Dell Networker

References · 8

• https://dell.com/support/kbdoc/en-us/000338757/dsa-2025-268-security-update-for-dell-networker-selection-of-less-secure-algorithm-during-negotiation-vulnerability · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09525 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36582 · Security Note
• https://twitter.com/ZeroDayCVE/status/1940300450684883434 · Twitter Post
• https://t.me/cveNotify/132358 · Telegram Post
• https://twitter.com/CVEnew/status/1940044273199481109 · Twitter Post
• https://t.me/cvetracker/27508 · Telegram Post