Threat Intelligence Database

Dell Container Storage Modules versions prior to 1.18.0 have a vulnerability involving improper neutralization of special elements in a template engine. This flaw allows a low privileged attacker with remote access to potentially elevate their privileges. The vulnerability is rated critical with a CVSS score of 9.6, indicating high impact on confidentiality and integrity without requiring user interaction.

Dell Container Storage Modules versions prior to 1.18.0 contain a missing authorization vulnerability in the Dell CSI Driver for PowerMax component (csireverseproxy). This flaw allows an unauthenticated attacker with adjacent network access to potentially gain unauthorized access. The vulnerability has a CVSS 3.1 score of 6.1, indicating a medium severity level. No official patch or remediation details are provided in the available data.

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Dell Container Storage Modules versions prior to 1.18.0 have a Missing Authentication for Critical Function vulnerability (CVE-2026-63692). This flaw allows an unauthenticated remote attacker to potentially elevate privileges. The vulnerability has a critical severity with a CVSS score of 10. No patch or remediation information is provided in the available data.

Dell Container Storage Modules (CSM) versions prior to 1.18.0 have a vulnerability due to missing authentication in the csm-authorization-tenant gRPC service. This flaw allows an unauthenticated adjacent network attacker to create tenant entities, inject roles across tenants, and modify storage access control flags without authorization. The vulnerability is classified as CWE-306 and has a CVSS score of 7.1, indicating high severity.

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Dell Container Storage Modules versions prior to 1.18.0 have a critical vulnerability involving improper neutralization of special elements in a template engine. This flaw allows a low privileged attacker with remote access to potentially elevate their privileges. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality and integrity. No known exploits are reported in the wild. The vulnerability is fixed starting from version 1.18.0.

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.