Threat database

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.

Dell PowerStore 500T contains a critical vulnerability (CVE-2026-58574) involving missing authentication for a critical function. An unauthenticated attacker with network access to the restricted management interface could exploit this flaw to read internal system information from the appliance filesystem. This exposure could lead to disclosure of sensitive information and credentials, potentially allowing full administrative access to the storage array.

Dell PowerProtect Cyber Recovery versions prior to 20.3 contain an improper authentication vulnerability (CWE-287). This flaw could allow a low privileged attacker with remote access to gain unauthorized access. The vulnerability has a high severity with a CVSS score of 7.6, indicating significant impact on confidentiality and integrity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Dell PowerProtect Cyber Recovery versions prior to 20.3 contain a UNIX Symbolic Link (Symlink) Following vulnerability (CWE-61). This flaw allows a low privileged local attacker to potentially perform script injection. The vulnerability has a medium severity with a CVSS score of 5.8. No official patch or remediation guidance has been provided yet by the vendor.

Dell PowerProtect Cyber Recovery versions 20.2 and earlier contain an SQL Injection vulnerability that allows a low privileged remote attacker to potentially disclose information. The vulnerability involves improper neutralization of special elements in SQL commands. It has a medium severity score of 6.5 and does not currently have an official fix or patch available.

Dell PowerProtect One versions 20.1.0.0 and earlier contain an OS Command Injection vulnerability (CWE-78) that allows a low privileged remote attacker to execute arbitrary code. This vulnerability has a high severity with a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Dell PowerProtect One versions 20.1.0.0 and below contain an authorization bypass vulnerability (CWE-639) that allows a low privileged remote attacker to manipulate information. This vulnerability does not affect confidentiality or availability but impacts integrity. No official patch or remediation guidance is currently provided by the vendor.

Dell PowerProtect One versions 20.1.0.0 and below have an improper certificate validation vulnerability (CWE-295). This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability has a medium severity with a CVSS score of 5.9. No official patch or remediation guidance has been provided yet.

Dell PowerProtect One versions 20.1.0.0 and below have a vulnerability involving reliance on an insufficiently trustworthy component. This flaw could allow an unauthenticated remote attacker to perform cache poisoning. The vulnerability has a medium severity rating with a CVSS score of 5.3. No official patch or remediation guidance is currently available from the vendor.

Dell PowerProtect One versions 20.1.0.0 and below contain an OS Command Injection vulnerability (CWE-78) that allows a low privileged remote attacker to execute arbitrary commands. This vulnerability has a high severity with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability if exploited.