CVE-2025-36572
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.
Risk Assessment
An attacker can gain unauthorized access to the system with the privileges of the hard-coded account, potentially leading to data confidentiality and integrity breaches.
Recommendation
Upgrade Dell PowerStore to a version where hard-coded credentials have been removed, or contact the vendor for guidance. Restrict remote access to PowerStore devices.
Other vulnerabilities in Dell PowerStore
See all- CVE-2026-58574Critical
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
- CVE-2026-58566High
Dell PowerStore contains an incorrect authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
- CVE-2026-79682High
Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2026-58567High
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2026-79686High
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could exploit this to bypass access restrictions and gain escalated privileges.
- CVE-2026-79685Medium
Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.
- CVE-2026-58569High
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this to execute arbitrary code with root privileges.
- CVE-2026-79684High
A Protection Mechanism Failure vulnerability in Dell PowerStore. An authenticated user with limited privileges could exploit this to bypass access restrictions and gain escalated privileges.
- CVE-2026-58572High
A Code Injection vulnerability in Dell PowerStore. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges.
- CVE-2026-58571High
An OS Command Injection vulnerability in Dell PowerStore. An authenticated user with limited privileges could exploit this to execute arbitrary commands with root privileges.
Original NVD description (English source)
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS