Powerstore 1000T
Monthly
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authorization controls and gain high-level access to the management plane. Affecting at least ten PowerStore hardware models across the T-series and Q-series lines, the flaw stems from incorrect authorization checks (CWE-863) - the system fails to enforce role boundaries on certain operations, allowing a low-privileged session to invoke privileged actions. No public exploit code or CISA KEV listing is identified at time of analysis, but the CVSS 8.8 score and full C/I/A impact make this a high-priority remediation item for any enterprise running PowerStore.
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arbitrary operating system commands with root privileges, achieving full appliance compromise. The CVSS scope-change metric (S:C) reflects that root access on a storage platform threatens all data hosted on the array, extending blast radius beyond the appliance itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity once local access is established makes this a priority remediation for organizations running affected PowerStore T and Q series hardware.
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges to execute arbitrary code at the operating system's highest privilege level. Affecting the full PowerStore T and Q product families (500T through 7000T confirmed via CPE), this CWE-829 flaw exploits the inclusion of functionality from an untrusted control sphere - meaning a low-privileged local user can influence a privileged execution path by supplying or manipulating untrusted code or configuration loaded by a higher-privileged process. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Argument Injection in Dell PowerStore storage appliances allows an authenticated low-privileged user to extract sensitive system information over the network without requiring additional interaction. The vulnerability (CWE-88) arises from improper neutralization of user-controlled input passed as arguments to an internal process, enabling privilege escalation of read access beyond what the account's role should permit. No public exploit code or active exploitation has been identified at time of analysis, though the low attack complexity and network accessibility make this a credible insider and compromised-credential threat.
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypass the platform's access control enforcement and gain elevated system privileges. Classified as CWE-693 (Protection Mechanism Failure), the flaw resides in the protection layer governing role-based access within the PowerStore management stack, spanning at least ten appliance models from the 500T to the 7000T series. The CVSS 8.8 score reflects full confidentiality, integrity, and availability impact, though network access with valid limited-privilege credentials is required; no public exploit code or active exploitation has been identified at time of analysis.
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges to execute arbitrary commands at the root level, achieving full privilege escalation on the appliance. The CVSS scope change (S:C) reflects that root access on a storage platform extends impact beyond the immediate process boundary to the entire appliance and potentially dependent workloads. Dell has published advisory DSA-2026-330, but no specific patched version was provided in available data. No public exploit identified at time of analysis.
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access restriction controls and gain elevated system privileges, classified under CWE-693 (Protection Mechanism Failure). The entire PowerStore T-series and Q-series lineup is affected, with a network-accessible, low-complexity attack path requiring only a valid account. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the high CVSS score and broad appliance coverage make this a material risk in enterprise storage environments.
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allows an authenticated user with limited privileges to execute arbitrary code at root privilege level, achieving full appliance compromise. The CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H vector confirms that exploitation requires only local authenticated access with low-level credentials and no user interaction, with the resulting code execution crossing a privilege boundary into a root context. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication bypass by spoofing vulnerability (CWE-290). Any attacker holding a low-privileged account on the PowerStore management plane can exploit this network-accessible flaw without user interaction to gain full administrative control, impacting confidentiality, integrity, and availability of the storage system. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the impact of Administrator-level compromise on enterprise storage infrastructure elevates operational risk considerably.
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administrator-only management operations via the network, resulting in full confidentiality, integrity, and availability compromise of the storage system. The flaw stems from incorrect authorization checks (CWE-863), where the system fails to enforce proper privilege boundaries on API or management interface operations. No public exploit identified at time of analysis and no CISA KEV listing, but the low attack complexity and high-impact CVSS 8.8 rating make this a credible threat in multi-tenant or shared-access storage environments.
Unauthenticated information disclosure in Dell PowerStore T-series storage appliances allows an attacker with network access to the restricted management interface to read arbitrary internal system information from the appliance filesystem, including stored credentials that grant full administrative control of the array. Tracked as CWE-306 (Missing Authentication for Critical Function) with a CVSS 9.8, it affects PowerStore 500T through 9200T models and is fixed per Dell advisory DSA-2026-330. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a mapped host connected to the array to read from or write to LUNs beyond those assigned to that initiator, effectively nullifying per-initiator LUN masking. Affected models span the full PowerStore T and Q product lines (500T through 7000T and beyond), as disclosed by Dell under advisory DSA-2026-330. No public exploit code or CISA KEV listing has been identified at time of analysis, but the complete C/I/A impact triplet reflects the severity of unrestricted storage access, particularly in multi-tenant or converged infrastructure environments where multiple workloads share the same array.
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through 7000T and beyond) to unauthenticated remote exploitation. The CWE-120 flaw in the RPC request handler allows an unauthenticated network attacker to achieve arbitrary command execution or denial of service against the NAS service. The CVSS 8.1 score is tempered by High Attack Complexity (AC:H), indicating exploitation requires non-trivial payload engineering rather than a simple spray-and-pray approach; no public exploit code and no CISA KEV listing have been identified at time of analysis.
Remote code execution and denial of service in Dell PowerStore T-series arrays (SDNAS software) stem from an out-of-bounds write in the SMB/CIFS file-sharing service, reachable by an unauthenticated remote attacker (CVSS 9.8, AV:N/PR:N). A single specially crafted SMB packet can crash the storage node, and because affected models are configured to auto-restart, the crash becomes a persistent, repeatable DoS; a more capable attacker can leverage the same memory-corruption primitive for arbitrary code execution. No public exploit has been identified at time of analysis, but this is a network-facing storage controller flaw and Dell has already shipped a fix.
Path traversal vulnerability in Dell PowerStore Service user allows low-privileged local attackers to modify arbitrary system files through improper input validation. The vulnerability affects multiple PowerStore models (500T through 9200T) and requires local access with low-privilege credentials; CVSS 4.4 reflects the local attack vector and limited integrity impact, though the ability to modify system files poses moderate operational risk for storage appliance integrity.
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authorization controls and gain high-level access to the management plane. Affecting at least ten PowerStore hardware models across the T-series and Q-series lines, the flaw stems from incorrect authorization checks (CWE-863) - the system fails to enforce role boundaries on certain operations, allowing a low-privileged session to invoke privileged actions. No public exploit code or CISA KEV listing is identified at time of analysis, but the CVSS 8.8 score and full C/I/A impact make this a high-priority remediation item for any enterprise running PowerStore.
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arbitrary operating system commands with root privileges, achieving full appliance compromise. The CVSS scope-change metric (S:C) reflects that root access on a storage platform threatens all data hosted on the array, extending blast radius beyond the appliance itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity once local access is established makes this a priority remediation for organizations running affected PowerStore T and Q series hardware.
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges to execute arbitrary code at the operating system's highest privilege level. Affecting the full PowerStore T and Q product families (500T through 7000T confirmed via CPE), this CWE-829 flaw exploits the inclusion of functionality from an untrusted control sphere - meaning a low-privileged local user can influence a privileged execution path by supplying or manipulating untrusted code or configuration loaded by a higher-privileged process. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Argument Injection in Dell PowerStore storage appliances allows an authenticated low-privileged user to extract sensitive system information over the network without requiring additional interaction. The vulnerability (CWE-88) arises from improper neutralization of user-controlled input passed as arguments to an internal process, enabling privilege escalation of read access beyond what the account's role should permit. No public exploit code or active exploitation has been identified at time of analysis, though the low attack complexity and network accessibility make this a credible insider and compromised-credential threat.
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypass the platform's access control enforcement and gain elevated system privileges. Classified as CWE-693 (Protection Mechanism Failure), the flaw resides in the protection layer governing role-based access within the PowerStore management stack, spanning at least ten appliance models from the 500T to the 7000T series. The CVSS 8.8 score reflects full confidentiality, integrity, and availability impact, though network access with valid limited-privilege credentials is required; no public exploit code or active exploitation has been identified at time of analysis.
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges to execute arbitrary commands at the root level, achieving full privilege escalation on the appliance. The CVSS scope change (S:C) reflects that root access on a storage platform extends impact beyond the immediate process boundary to the entire appliance and potentially dependent workloads. Dell has published advisory DSA-2026-330, but no specific patched version was provided in available data. No public exploit identified at time of analysis.
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access restriction controls and gain elevated system privileges, classified under CWE-693 (Protection Mechanism Failure). The entire PowerStore T-series and Q-series lineup is affected, with a network-accessible, low-complexity attack path requiring only a valid account. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the high CVSS score and broad appliance coverage make this a material risk in enterprise storage environments.
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allows an authenticated user with limited privileges to execute arbitrary code at root privilege level, achieving full appliance compromise. The CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H vector confirms that exploitation requires only local authenticated access with low-level credentials and no user interaction, with the resulting code execution crossing a privilege boundary into a root context. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication bypass by spoofing vulnerability (CWE-290). Any attacker holding a low-privileged account on the PowerStore management plane can exploit this network-accessible flaw without user interaction to gain full administrative control, impacting confidentiality, integrity, and availability of the storage system. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the impact of Administrator-level compromise on enterprise storage infrastructure elevates operational risk considerably.
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administrator-only management operations via the network, resulting in full confidentiality, integrity, and availability compromise of the storage system. The flaw stems from incorrect authorization checks (CWE-863), where the system fails to enforce proper privilege boundaries on API or management interface operations. No public exploit identified at time of analysis and no CISA KEV listing, but the low attack complexity and high-impact CVSS 8.8 rating make this a credible threat in multi-tenant or shared-access storage environments.
Unauthenticated information disclosure in Dell PowerStore T-series storage appliances allows an attacker with network access to the restricted management interface to read arbitrary internal system information from the appliance filesystem, including stored credentials that grant full administrative control of the array. Tracked as CWE-306 (Missing Authentication for Critical Function) with a CVSS 9.8, it affects PowerStore 500T through 9200T models and is fixed per Dell advisory DSA-2026-330. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a mapped host connected to the array to read from or write to LUNs beyond those assigned to that initiator, effectively nullifying per-initiator LUN masking. Affected models span the full PowerStore T and Q product lines (500T through 7000T and beyond), as disclosed by Dell under advisory DSA-2026-330. No public exploit code or CISA KEV listing has been identified at time of analysis, but the complete C/I/A impact triplet reflects the severity of unrestricted storage access, particularly in multi-tenant or converged infrastructure environments where multiple workloads share the same array.
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through 7000T and beyond) to unauthenticated remote exploitation. The CWE-120 flaw in the RPC request handler allows an unauthenticated network attacker to achieve arbitrary command execution or denial of service against the NAS service. The CVSS 8.1 score is tempered by High Attack Complexity (AC:H), indicating exploitation requires non-trivial payload engineering rather than a simple spray-and-pray approach; no public exploit code and no CISA KEV listing have been identified at time of analysis.
Remote code execution and denial of service in Dell PowerStore T-series arrays (SDNAS software) stem from an out-of-bounds write in the SMB/CIFS file-sharing service, reachable by an unauthenticated remote attacker (CVSS 9.8, AV:N/PR:N). A single specially crafted SMB packet can crash the storage node, and because affected models are configured to auto-restart, the crash becomes a persistent, repeatable DoS; a more capable attacker can leverage the same memory-corruption primitive for arbitrary code execution. No public exploit has been identified at time of analysis, but this is a network-facing storage controller flaw and Dell has already shipped a fix.
Path traversal vulnerability in Dell PowerStore Service user allows low-privileged local attackers to modify arbitrary system files through improper input validation. The vulnerability affects multiple PowerStore models (500T through 9200T) and requires local access with low-privilege credentials; CVSS 4.4 reflects the local attack vector and limited integrity impact, though the ability to modify system files poses moderate operational risk for storage appliance integrity.