VULNERABILITY INTELLIGENCE
CVE-2025-36572
CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-05-28
Last modified2026-09-11
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.
Weakness classification
- security_alert@emc.com: CWE-798
Primary references
- security_alert@emc.com — Vendor Advisory