Threat Intelligence Database

Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and send a short fragment, causing BRecv to memcpy past the buffer and crash or corrupt SCADA, HMI or gateway processes.

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service.

snap7 versions up to and including 1.4.3 have an out-of-bounds write vulnerability in the TSnap7MicroClient::opReadArea() function. This flaw allows malicious or impersonated S7 peers to overflow client buffers by exploiting an unchecked DataLength field. Crafted ReadVar responses can cause memcpy operations of up to 65535 bytes into caller buffers, potentially crashing SCADA, HMI, or gateway processes and corrupting memory.

Dell OS Recovery Tool versions prior to 2.4.4 contain an insecure storage of sensitive information vulnerability (CWE-922). This flaw could allow a low privileged attacker with physical access to potentially disclose sensitive information. The vulnerability has a low severity rating with a CVSS score of 2.2. No known exploits are reported in the wild. The issue affects versions from 0 up to but not including 2.4.4.

Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 contain a vulnerability where sensitive information may be inserted into log files. This issue affects the provider configuration component and could be exploited by a low privileged attacker with remote access, potentially leading to information exposure. The vulnerability has a medium severity rating with a CVSS score of 4.3.

CVE-2026-91882 is a high-severity vulnerability in Dell Terraform Provider for OME versions 1.0.0 through 1.2.3. It involves the generation of error messages that contain sensitive information due to improper error handling in the API client component. An unauthenticated remote attacker could exploit this flaw to gain access to sensitive data. The vulnerability is classified under CWE-209, which relates to information exposure through error messages.

CVE-2026-91881 is a critical vulnerability in Dell Terraform Provider for Redfish versions prior to 1.6.2. It involves improper certificate validation in the HTTP transport component, where TLS certificate verification is disabled unconditionally. This flaw allows an unauthenticated remote attacker to perform man-in-the-middle attacks, intercepting all Redfish BMC traffic including credentials. Dell recommends upgrading to a fixed version to mitigate this issue.

Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 contains a vulnerability where sensitive information may be inserted into log files in the redfish_certificate resource. This could allow a high privileged remote attacker to gain access to sensitive data. The vulnerability is classified as CWE-532 and has a medium severity rating with a CVSS score of 4.3.

Dell PowerScale InsightIQ versions 5.2.0 through 6.3.0 have an overly restrictive account lockout mechanism vulnerability. This flaw could allow an unauthenticated remote attacker to cause a denial of service by triggering account lockouts. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS score is 5.3 (medium severity). No patches or vendor advisories are provided to confirm remediation status.

Dell PowerScale InsightIQ versions 5.2.0 through 6.3.0 contain an SQL Injection vulnerability (CWE-89) that allows a low privileged local attacker to potentially cause a denial of service. The vulnerability does not impact confidentiality but can affect system availability.

Dell Unisphere for PowerMax vApp version 9.2.4.x contains an OS Command Injection vulnerability (CWE-78) that allows a high privileged remote attacker to execute arbitrary commands on the affected system. The vulnerability has a CVSS 3.1 score of 6.6, indicating a medium severity level. No patch or remediation details are provided in the available data.

Dell Unisphere for PowerMax vApp version 9.2.4.x contains a path traversal vulnerability (CWE-22) that allows a low privileged remote attacker to access restricted directories, potentially leading to information disclosure. The vulnerability has a CVSS 3.1 score of 6.5 (medium severity). No patch or remediation information is currently provided by the vendor.

Dell Unisphere for PowerMax vApp version 9.2.4.x contains a command injection vulnerability (CWE-77) that allows a high privileged remote attacker to execute arbitrary commands. This vulnerability can lead to full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.6, indicating a medium severity level.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an incorrect authorization vulnerability (CWE-863). This flaw allows a high privileged attacker with remote access to potentially elevate privileges and gain unauthorized access. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a path traversal vulnerability (CWE-22). This flaw allows a high privileged local attacker to potentially execute code and access the filesystem by improperly limiting pathname access to restricted directories. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity. No official patch or remediation details are provided in the input data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an incorrect permission assignment vulnerability. This flaw allows a low privileged local attacker to potentially disclose information, bypass protection mechanisms, and gain unauthorized access. The vulnerability is identified as CWE-732 and has a medium severity with a CVSS score of 6.3. No patch information is provided in the input data.