Recherche « Dell PowerStore »
20 CVE
-
CVE-2026-63690 7.4 Élevée
Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
-
CVE-2026-58566 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
-
CVE-2026-79687 10.0 Critique
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.
-
CVE-2026-79682 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
-
CVE-2026-58567 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
-
CVE-2026-79686 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
-
CVE-2026-79685 6.5 Moyenne
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.
-
CVE-2026-58569 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..
-
CVE-2026-79684 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
-
CVE-2026-58572 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
-
CVE-2026-58571 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
-
CVE-2026-79683 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.
-
CVE-2026-58575 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.
-
CVE-2026-76111 8.8 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.
-
CVE-2026-58574 9.8 Critique
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
-
CVE-2026-67262 8.1 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
-
CVE-2026-70415 8.1 Élevée
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.
-
CVE-2026-67271 9.8 Critique
Dell PowerStore 500T · Dell PowerStore 1000T · Dell PowerStore 1200T · Dell PowerStore 3000T
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.
-
CVE-2026-40711 8.0 Élevée
Dell Container Storage Modules
Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
-
CVE-2024-30476 5.4 Moyenne
Dell PowerStore
PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager. A remote authenticated low-privileged malicious actor could potentially exploit this vulnerability, it could lead to script execution in the client browser.