Use of Hard-coded Password in Dell SmartFabric OS10 Software
CVE-2025-36609

7.8HIGH

Key Information:

Vendor

Dell
Status
SmartFabric OS10 Software
Vendor
CVE Published:
30 July 2025

What is CVE-2025-36609?

The Dell SmartFabric OS10 Software, prior to version 10.6.0.5, is susceptible to a Use of Hard-coded Password vulnerability. This issue permits a low privileged attacker with local administrative access to exploit the hard-coded password to potentially escalate their privileges within the system. Organizations using affected versions are encouraged to update their software to mitigate this risk and enhance security.

References

https://www.dell.com/support/kbdoc/en-us/000346195/dsa-20...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-36609 : Use of Hard-coded Password in Dell SmartFabric OS10 Software