CVE-2025-36573

Published: Jun 12, 2025Modified: Jan 13, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure.

Affected (2)

Products: Dell: Pro Smart Dock Sd25 Firmware, Pro Thunderbolt 4 Smart Dock Sd25tb4 Firmware

Dell

2 products

Pro Smart Dock Sd25 Firmware

Pro Thunderbolt 4 Smart Dock Sd25tb4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Pro Smart Dock Sd25 Firmware	Before 01.00.08.01

Running on/with	Platform Versions
Dell Pro Smart Dock Sd25	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Pro Thunderbolt 4 Smart Dock Sd25tb4 Firmware	Before 01.00.08.01

Running on/with	Platform Versions
Dell Pro Thunderbolt 4 Smart Dock Sd25tb4	All versions

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.dell.com/support/kbdoc/en-us/000323183/dsa-2025-218

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.