CVE-2026-58574
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security_alert@emc.com (Secondary)
Description
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
Affected (9)
Products: Dell: Powerstoreos
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.1.0.0 build_2435323 |
| Running on/with | Platform Versions |
|---|---|
Dell Powerstore 1000t | All versions |
Dell Powerstore 1200t | All versions |
Dell Powerstore 3000t | All versions |
Dell Powerstore 3200q | All versions |
Dell Powerstore 3200t | All versions |
Dell Powerstore 5000t | All versions |
Dell Powerstore 500t | All versions |
Dell Powerstore 5200q | All versions |
Dell Powerstore 5200t | All versions |
Dell Powerstore 7000t | All versions |
Dell Powerstore 9000t | All versions |
Dell Powerstore 9200t | All versions |
References (1)
Source: security_alert@emc.com
Vendor Advisory
Timeline
No history available yet.