CVE-2024-37143

CVE-2024-37143 affects Dell PowerFlex family: PowerFlex appliance versions before IC 46.381.00 and IC 46.376.00; PowerFlex rack versions before RCM 3.8.1.0 (RCM 3.8.x) or before RCM 3.7.6.0 (RCM 3.7.x); PowerFlex custom node with PowerFlex Manager versions before 4.6.1.0; Dell InsightIQ before 5....

CVE-2024-39583

Dell PowerScale InsightIQ (versions 5.0–5.1) is affected by CVE-2024-39583 due to use of a broken or risky cryptographic algorithm, enabling an unauthenticated attacker with remote access to potentially achieve elevation of privilege. Publicly available connected documents confirm the affected pr...

CVE-2024-37144

CVE-2024-37144 affects Dell PowerFlex family: appliance versions prior to IC 46.381.00 and IC 46.376.00; PowerFlex rack prior to RCM 3.8.1.0 (RCM 3.8.x train) or prior to 3.7.6.0 (RCM 3.7.x); custom nodes with PowerFlex Manager prior to 4.6.1.0; InsightIQ prior to 5.1.1; Data Lakehouse prior to 1...

CVE-2024-39581

Dell PowerScale InsightIQ (versions 5.0–5.1) contains a File or Directories Accessible to External Parties vulnerability that an unauthenticated, remote attacker could exploit to read, modify, and delete arbitrary files. A security update exists (DSA-2024-360) from Dell addressing multiple vulner...

CVE-2024-25962

Dell InsightIQ 5.0 has an improper access control vulnerability that could allow a remote low-privileged attacker to gain unauthorized access to monitoring data. The root cause is an incorrect access control mechanism within the application. Documented impacts include potential exposure of monito...

CVE-2024-39580

Dell PowerScale InsightIQ (versions 5.0–5.1) contains an Improper Access Control vulnerability that could enable local privilege elevation by a high-privilege attacker. Root cause is an access-control error impacting elevated rights on local access. Affected product: Dell PowerScale InsightIQ; af...

CVE-2024-28972

Dell InsightIQ 5.0.0 is affected by a use of a broken or risky cryptographic algorithm that could be exploited by an unauthenticated remote attacker to cause information disclosure. The vulnerability is documented across multiple sources indicating affected versions include 5.0.0 and prior to 5.0...

CVE-2024-39582

Dell PowerScale InsightIQ 5.0 is affected by CVE-2024-39582 due to use of hard-coded credentials in the product. A high-privileged attacker with local access could exploit this to cause information disclosure. Root cause is the hard-coded credentials embedded in the software. No exploitation deta...

CVE-2024-39574

CVE-2024-39574 affects Dell PowerScale InsightIQ 5.1. The vulnerability is described as an improper privilege management issue that could allow a high-privilege attacker with local access to cause a Denial of Service. Exploitation details are not provided in the sources; the CVE record itself lis...

CVE-2025-30475

Dell PowerScale InsightIQ vulnerable: versions 5.0–5.2 suffer improper privilege management that allows an unauthenticated, remote attacker to achieve elevated privileges. The issue, described across multiple sources (Dell advisory DSA-2025-186 and RH/CNVD-type entries), is a privilege-escalation...

CVE-2025-30476

Dell PowerScale InsightIQ 5.2 contains an Uncontrolled Resource Consumption vulnerability that could allow an unauthenticated, remotely accessible attacker to cause a Denial of Service. Documents consistently identify the affected component as InsightIQ (version 5.2) and cite resource exhaustion ...

CVE-2026-35071

The CVE-2026-35071 entry concerns Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, with an OS Command Injection flaw caused by improper neutralization of special elements in an OS command. A high-privilege attacker with local access could potentially exploit this to achieve command execut...

CVE-2026-40638

Dell PowerScale InsightIQ versions 5.0.0–6.2.0 contain an elevation of privileges flaw described as an execution with unnecessary privileges. A high-privileged attacker with local access could potentially exploit this to gain elevated rights. The available documents do not provide exploitation st...