Powerstoreos vulnerabilities
21 known vulnerabilities in Powerstoreos from Dell. 21 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
PowerStore 500T: Missing Authentication for Critical Functionality
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.
- 8.8 High severity
PowerStore 500T: Improper Neutralization of Special Elements used in a Command
Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- 8.8 High severity
PowerStore 500T: Improper Neutralization of Special Elements used in an OS Command
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- 8.8 High severity
PowerStore 500T: Protection Mechanism Failure
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
- 8.8 High severity
PowerStore 500T: Inclusion of Functionality from Untrusted Control Sphere
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..
- 8.8 High severity
PowerStore 500T: Protection Mechanism Failure
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
- 8.8 High severity
PowerStore 500T: Improper Control of Generation of Code
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
- 8.8 High severity
PowerStore 500T: Improper Neutralization of Special Elements used in an OS Command
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- 8.8 High severity
PowerStore 500T: Protection Mechanism Failure
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.
- 8.8 High severity
PowerStore 500T: Authentication Bypass by Spoofing
Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.
- 8.8 High severity
PowerStore 500T: Incorrect Authorization
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.
- 9.8 Critical severity
PowerStore 500T: Missing Authentication for Critical Functionality
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from
- 7.1 High severity
PowerStore: Improper Limitation of a Pathname to a Restricted Directory
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
- 7.1 High severity
PowerStore: Improper Neutralization of Argument Delimiters in a Command
Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system
- 7.8 High severity
PowerStore: Improper Verification of Cryptographic Signature
Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks
- 9.8 Critical severity
PowerStore: Improper Authentication
Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability under specific configuration. An attacker would gain unauthorized access upon successful exploit.
- 9.8 Critical severity
PowerStore: Exposure of Resource to Wrong Sphere
Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and arbitrary code execution.
- 7.8 High severity
PowerStore: Improper Neutralization of Special Elements used in an OS Command
Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS,
- 8.0 High severity
PowerStore: Improper Neutralization of Formula Elements in a CSV File
PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by t
- 7.8 High severity
PowerStore: Insufficiently Protected Credentials
PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credent
- 7.5 High severity
PowerStore: Uncontrolled Resource Consumption
Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the Denial of Service.