Use of Hard-coded Credentials in Dell PowerStore

CVE-2025-36572

What is CVE-2025-36572?

The Dell PowerStore product line has been identified to contain a vulnerability related to hard-coded credentials within its image file. This issue allows a low-privileged attacker, equipped with remote access and knowledge of the hard-coded credentials, to exploit this flaw. If successfully exploited, the attacker could gain unauthorized access to the system, utilizing the privileges associated with the compromised account. This vulnerability highlights the importance of addressing hard-coded credentials in systems to mitigate potential security risks.

References