← Back

CVE-2026-79685

nvd nist
Published: Sep 1, 2026Modified: Oct 2, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: security_alert@emc.com (Secondary)

Description

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

Affected (9)

Products: Dell: Powerstoreos
Dell
1 product
Powerstoreos
Configuration A
9 vulnerable · 12 platform
Vulnerable SoftwareAffected Versions
Dell
Powerstoreos
Version 4.1.0.0 build_2435323
Powerstoreos
Version 4.1.0.1 build_2529516
Powerstoreos
Version 4.1.0.2 build_2567482
Powerstoreos
Version 4.1.0.3 build_2596462
Powerstoreos
Version 4.1.0.4 build_2633110
Powerstoreos
Version 4.1.0.5 build_2691357
Powerstoreos
Version 4.3.0.0 build_2611831
Powerstoreos
Version 4.3.1.0 build_2662695
Powerstoreos
Version 4.3.1.1 build_2726662
Running on/withPlatform Versions
Dell
Powerstore 1000t
All versions
Dell
Powerstore 1200t
All versions
Dell
Powerstore 3000t
All versions
Dell
Powerstore 3200q
All versions
Dell
Powerstore 3200t
All versions
Dell
Powerstore 5000t
All versions
Dell
Powerstore 500t
All versions
Dell
Powerstore 5200q
All versions
Dell
Powerstore 5200t
All versions
Dell
Powerstore 7000t
All versions
Dell
Powerstore 9000t
All versions
Dell
Powerstore 9200t
All versions

Related CWEs

CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.