6.5
Medium
CVE-2025-36572 Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image…
Description
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerStore 4.0 | earliest → < 4.0.1.3-2494147 | 4.0.1.3-2494147 |
Other CVEs of PowerStore
The 23 CVEs of PowerStore →
CVE-2024-30476
PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager
5.4
Medium
CVE-2026-28265
PowerStore, contains a Path Traversal vulnerability in the Service user
4.4
Medium
CVE-2024-51532
Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…
7.1
High
CVE-2023-32478
Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability
9.0
Critical