Dock update tools and firmware had local flaws lockdown can strand
Four local CVEs hit Dell and Lenovo dock updaters or firmware; the post claims no exploitation.
46
Vulnerability1 · 1 read
CVE-2025-36573
- CVSS 3.1
- 5.5 medium
- EPSS
- <1%p3
- Published
- ·
- Modified
Description · NVD
Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure.
- Vendors
- dell
- Products
- pro smart dock sd25 firmware, pro thunderbolt 4 smart dock sd25tb4 firmware
- Weakness
- CWE-532
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N