PatchTheCVECVE-2025-36573: Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Lo
CVE-2025-36573 is a high-severity flaw (CVSS 7.1) affecting pro smart dock sd25 firmware, pro thunderbolt 4 smart dock sd25tb4 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.1 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 96%) |
| CISA exploited list | No |
| Weakness | CWE-532 |
| Published | 2025-06-12 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-36573?
pro smart dock sd25 firmware: upgrade to 01.00.08.01; pro thunderbolt 4 smart dock sd25tb4 firmware: upgrade to 01.00.08.01. Exact commands for each OS are on this page.
Is CVE-2025-36573 being exploited?
CVE-2025-36573 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-36573 affect?
CVE-2025-36573 affects pro smart dock sd25 firmware, pro thunderbolt 4 smart dock sd25tb4 firmware. Severity is high (CVSS 7.1). Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure.
How urgent is CVE-2025-36573?
Priority 26/100. High severity