PT-2025-31398 · Dell · Dell Security Management Server+1

Published 2025-07-28 · Updated 2025-07-30 · CVE-2025-36611

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Encryption and Dell Security Management Server versions prior to 11.11.0

Description Dell Encryption and Dell Security Management Server are affected by an Improper Link Resolution Before File Access ('Link Following') issue. A local malicious user could potentially exploit this issue, leading to privilege escalation.

Recommendations Update Dell Encryption and Dell Security Management Server to version 11.11.0 or later.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2025-09394

CVE-2025-36611

Affected Products

Dell Encryption

Dell Security Management Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36611 · Security Note
• https://dell.com/support/kbdoc/en-us/000347824/dsa-2025-292 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09394 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36611 · Vendor Advisory
• https://t.me/CVEtracker/28763 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950620282047123721 · Twitter Post
• https://twitter.com/CVEnew/status/1950600248847441929 · Twitter Post
• https://dell.com/support/kbdoc/en-us/000347824/dsa-2025-29 · Note