MEDIUM✓ PATCH🇬🇧 English

CVE-2026-28265

CVSS 4.4v3.1pub. 2026-04-01upd. 2026-04-02

PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

  • Dell Powerstore 1000t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 1200t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 3000t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 3200q

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 3200t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 5000t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 500t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 5200q

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 5200t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 7000t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 9000t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstore 9200t

    HW
    Dell
    wszystkie wersje

  • Dell Powerstoreos

    OS
    Dell
    < 4.4.0.0-2692403
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2023-32478CRITICAL9.0ten sam produkt

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnera...

CVE-2022-26869CRITICAL9.8ten sam produkt

Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenti...

CVE-2024-51532HIGH7.1ten sam produkt

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')...

CVE-2023-32449HIGH7.2ten sam produkt

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerabili...

CVE-2022-26870HIGH7.0ten sam produkt

Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated atta...