CVE-2025-36572

The CVE-2025-36572 entry concerns Dell PowerStore 4.0.0.0 with a Use of Hard-coded Credentials in the PowerStore image file. The underlying issue is hard-coded credentials enabling a low-privileged, remote attacker to gain unauthorized access consistent with the credentials’ privileges. Affects D...

CVE-2025-36572

Dell PowerStore, versions 4.0.0.0, contains an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based o...

PT-2025-23097 · Dell · Dell Powerstore

Name of the Vulnerable Software and Affected Versions: Dell PowerStore version 4.0.0.0 Description: The issue concerns the use of hard-coded credentials in the PowerStore image file. A low-privileged attacker with remote access and knowledge of these credentials could exploit this to gain...

CVE-2024-25963

Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-28970

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service...

CVE-2023-28044

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

CVE-2023-23690

Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker could perform a man-in-the-middle attack and eavesdrop o...

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager arises from improper code generation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2018-15748

On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.152335dn MFP 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of t...

CVE-2012-6272

Multiple cross-site scripting XSS vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/indexmain.htm in 1 help/sm/en/Output/wwhelp/wwhimpl/js/, 2...

CVE-2013-3589

Cross-site scripting XSS vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter...

CVE-2013-3582

Buffer overflow in Dell BIOS on Dell Latitude D, E, XT2, and Z600 devices, and Dell Precision M devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbupacket.pktNum value in...

CVE-2013-6246

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

CVE-2011-4046

The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code...

CVE-2019-15084

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...

CVE-2011-4047

The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access...

CVE-2013-0120

The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service device crash via a malformed request...

CVE-2011-4436

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Dell PowerScale InsightIQ Elevation of Privilege Vulnerability

Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. An elevation of privilege vulnerability exists in Dell PowerScale InsightIQ that stems from improper privilege management and can be exploited by an attacker to cause an elevation of privilege...

Dell PowerScale OneFS Denial of Service Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A denial of service vulnerability exists in Dell PowerScale OneFS, which arises from uncontrolled resource consumption and can be exploited by an attacker to caus...