PowerStore 9500 vulnerabilities
10 known vulnerabilities in PowerStore 9500 from Dell. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
PowerStore 500T: Improper Neutralization of Special Elements used in an SQL Command
Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, potentially leading to disclosure of stored private keys and tampering with trusted certificates.
- 9.1 Critical severity
PowerStore 500T: Improper Neutralization of Special Elements used in an OS Command
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
- 8.1 High severity
PowerStore 500T: Out-of-bounds Read
Dell PowerStore contains an out-of-bounds read vulnerability. An attacker could exploit this vulnerability, potentially leading to denial of service or limited information disclosure.
- 8.8 High severity
PowerStore 500T: Integer Overflow or Wraparound
Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.
- 8.7 High severity
PowerStore 500T: Integer Overflow or Wraparound
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.
- 7.2 High severity
PowerStore 500T: Incorrect Authorization
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.
- 7.2 High severity
PowerStore 500T: Improper Neutralization of Special Elements used in an OS Command
Dell PowerStore contains an OS Command Injection vulnerability. A high-privileged attacker could exploit this vulnerability, potentially leading to arbitrary root command execution on the appliance.
- 7.1 High severity
PowerStore 500T: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit it to impersonate another identity, potentially leading to unauthorized access.
- 8.8 High severity
PowerStore 500T: Server-Side Request Forgery
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
- 8.3 High severity
PowerStore 500T: External Control of File Name or Path
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.