Product:
Unisphere for PowerMax
Summary
Dell Unisphere for PowerMax contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.6 | CVE-2025-36589 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can craft a malicious XML request that leverages the improper restriction of XML external entity references. This could allow the attacker to access sensitive data or resources that are not intended to be accessible, thereby compromising the security of the system.
Affected Products
- Unisphere for PowerMax version 9.2.4.x: Contains the vulnerability that allows unauthorized access to data.
Mitigation
It is recommended to apply the latest security updates provided by Dell to mitigate this vulnerability. Users should ensure that their systems are updated to the latest version to protect against potential exploitation.