EUVD-2026-61049
GHSA-8vwp-cgv5-3q4x
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated single-packet SMB trigger over the network (AV:N/AC:L/PR:N/UI:N); memory corruption yields DoS plus potential RCE on the controller, giving full C/I/A impact.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution.
AnalysisAI
Remote code execution and denial of service in Dell PowerStore T-series arrays (SDNAS software) stem from an out-of-bounds write in the SMB/CIFS file-sharing service, reachable by an unauthenticated remote attacker (CVSS 9.8, AV:N/PR:N). A single specially crafted SMB packet can crash the storage node, and because affected models are configured to auto-restart, the crash becomes a persistent, repeatable DoS; a more capable attacker can leverage the same memory-corruption primitive for arbitrary code execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the PowerStore array's SMB/CIFS (SDNAS) service, which must be enabled and serving file shares - the crafted SMB packet is the trigger and no authentication or user interaction is needed (PR:N/UI:N confirmed by CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority issue rather than an inflated score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: PowerStore OS version 5.0.0.2-2761110 or later; upgrade all affected PowerStore T-series arrays to this build per Dell advisory DSA-2026-330 (https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Dell PowerStore T-series arrays and confirm SDNAS software versions currently deployed; if affected versions are identified, restrict network access to SMB/CIFS services and storage management interfaces to trusted networks only as an interim control. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerstore 500T
View allUnauthenticated information disclosure in Dell PowerStore T-series storage appliances allows an attacker with network ac
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authoriz
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arb
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypas
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allow
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administ
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today