Product:
Unisphere for PowerMax
Summary
Dell Unisphere for PowerMax contains an SQL Injection vulnerability that allows a low privileged attacker with remote access to potentially exploit the system. This could lead to command execution, compromising the integrity and confidentiality of the system. The vulnerability affects specific versions of the product.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-36588 |
Exploitation
To exploit this vulnerability, an attacker would need to have low-level privileges and remote access to the affected system. By crafting specific SQL commands that are improperly neutralized, the attacker could execute arbitrary commands on the database, leading to unauthorized actions and data exposure.
Affected Products
- Unisphere for PowerMax 10.2.0.x – Contains an SQL Injection vulnerability that could allow command execution by low privileged attackers.
Mitigation
It is recommended that users of Dell Unisphere for PowerMax apply the latest security updates provided by Dell to mitigate this vulnerability. Regularly updating software and monitoring for unusual activity can also help protect against potential exploitation.