Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Dell | PowerStore 500T | unaffected |
|
||||||
| Dell | PowerStore 1000T | unaffected |
|
||||||
| Dell | PowerStore 1200T | unaffected |
|
||||||
| Dell | PowerStore 3000T | unaffected |
|
||||||
| Dell | PowerStore 3200Q | unaffected |
|
||||||
| Dell | PowerStore 3200T | unaffected |
|
||||||
| Dell | PowerStore 5000T | unaffected |
|
||||||
| Dell | PowerStore 5200Q | unaffected |
|
||||||
| Dell | PowerStore 5200T | unaffected |
|
||||||
| Dell | PowerStore 7000T | unaffected |
|
||||||
| Dell | PowerStore 9000T | unaffected |
|
||||||
| Dell | PowerStore 9200T | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Dell | Powerstore 1000t |
|
||||||||
| Dell | Powerstore 1200t |
|
||||||||
| Dell | Powerstore 3000t |
|
||||||||
| Dell | Powerstore 3200q |
|
||||||||
| Dell | Powerstore 3200t |
|
||||||||
| Dell | Powerstore 5000t |
|
||||||||
| Dell | Powerstore 500t |
|
||||||||
| Dell | Powerstore 5200q |
|
||||||||
| Dell | Powerstore 5200t |
|
||||||||
| Dell | Powerstore 7000t |
|
||||||||
| Dell | Powerstore 9000t |
|
||||||||
| Dell | Powerstore 9200t |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.831% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Dell PowerStore Out‑of‑Bounds Write in SMB/CIFS Leading to Possible Remote Code Execution |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution. | Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution. |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dell
Dell powerstore 1000t Dell powerstore 1200t Dell powerstore 3000t Dell powerstore 3200q Dell powerstore 3200t Dell powerstore 5000t Dell powerstore 500t Dell powerstore 5200q Dell powerstore 5200t Dell powerstore 7000t Dell powerstore 9000t Dell powerstore 9200t |
|
| Vendors & Products |
Dell
Dell powerstore 1000t Dell powerstore 1200t Dell powerstore 3000t Dell powerstore 3200q Dell powerstore 3200t Dell powerstore 5000t Dell powerstore 500t Dell powerstore 5200q Dell powerstore 5200t Dell powerstore 7000t Dell powerstore 9000t Dell powerstore 9200t |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Dell PowerStore Out‑of‑Bounds Write in SMB/CIFS Leading to Possible Remote Code Execution |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution. | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|