EUVD-2026-61073
GHSA-xmq5-758c-5pfg
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
PR:L reflects the practical prerequisite of controlling an enrolled mapped host; AC:H captures the non-trivial condition of having an established SAN initiator registration on the array.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
AnalysisAI
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a mapped host connected to the array to read from or write to LUNs beyond those assigned to that initiator, effectively nullifying per-initiator LUN masking. Affected models span the full PowerStore T and Q product lines (500T through 7000T and beyond), as disclosed by Dell under advisory DSA-2026-330. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must control a host whose initiator identity (iSCSI IQN, Fibre Channel WWN, or NVMe NQN) is already registered in the PowerStore host mapping configuration - this is the primary limiting condition. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.1 (High) rating with vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H reflects a network-reachable flaw with complete confidentiality, integrity, and availability impact, but the AC:H modifier is the critical qualifier: exploitation requires the attacker to already control a host that is mapped and connected to the array, making this far less opportunistic than a typical unauthenticated network flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the security update detailed in Dell advisory DSA-2026-330 at https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities; the exact patched firmware version is not specified in available data and must be retrieved directly from the advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all mapped hosts connected to affected PowerStore arrays (models 500T through 7000T) and conduct security assessment of host access controls and hardening posture; simultaneously establish enhanced monitoring on storage array access patterns to detect anomalous LUN access attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerstore 500T
View allRemote code execution and denial of service in Dell PowerStore T-series arrays (SDNAS software) stem from an out-of-boun
Unauthenticated information disclosure in Dell PowerStore T-series storage appliances allows an attacker with network ac
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authoriz
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arb
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypas
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allow
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administ
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today