11 matches found
CVE-2022-22557
Dell PowerStore X & T appliances (PowerStore) are affected by CVE-2022-22557, with vulnerable components involving plain-text password storage in versions 2.0.0.x and 2.0.1.x. The issue enables a locally authenticated attacker to disclose certain user credentials, who may use exposed credentials ...
CVE-2022-22556
Technical details about CVE-2022-22556 are not publicly provided in the connected documents. Available sources describe a Dell PowerStore UI resource consumption DoS vulnerability but do not disclose affected versions, root cause, exploits, or fixes. Monitor for updates.
CVE-2022-26868
Dell PowerStore (Dell EMC) versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to an OS command injection. An authenticated attacker could execute arbitrary commands on the underlying OS with the vulnerable process’s privileges, potentially leading to system takeover. Affected component: PowerS...
CVE-2022-26866
Dell PowerStore is affected by a Stored Cross-Site Scripting vulnerability in versions before v2.1.1.0. A high-privilege network attacker could store malicious HTML/JavaScript in the trusted application data store; when victims access data via their browsers, the code can execute in the web app c...
CVE-2022-26867
Dell PowerStore (SW v2.1.1.0) allows exporting data to CSV/XLSX without validation or sanitization. A malicious, authenticated user can inject payloads that spreadsheet applications may interpret as formulas when opening the exported file. This is a formula-injection risk in data export functiona...
CVE-2025-36572
The CVE-2025-36572 entry concerns Dell PowerStore 4.0.0.0 with a Use of Hard-coded Credentials in the PowerStore image file. The underlying issue is hard-coded credentials enabling a low-privileged, remote attacker to gain unauthorized access consistent with the credentials’ privileges. Affects D...
CVE-2022-26869
Dell PowerStore (versions 2.0.0.x, 2.0.1.x, 2.1.0.x) contains an open port vulnerability that could be exploited remotely by an unauthenticated attacker to achieve information disclosure and arbitrary code execution. Impact is described as INFORMATION DISCLOSURE and HIGH- and CRITICAL-severity in...
CVE-2024-51532
CVE-2024-51532 affects Dell PowerStore with a vulnerability described as improper neutralization of argument delimiters (parameter injection). The issue can be exploited by a low-privilege attacker with local access to modify arbitrary system files, tied to the PowerStore component handling comma...
CVE-2022-26870
CVE-2022-26870 affects Dell PowerStore 2.1.0.x. A remote unauthenticated attacker could exploit an authentication bypass to gain unauthorized access, per Dell/NVD entries. The issue is tied to the PowerStore T OS authentication handling under specific configurations, with impact stated as comprom...
CVE-2023-32478
Dell PowerStore (pre-3.5.0.1) is affected by a vulnerability where sensitive information can be inserted into log files. The issue stems from how logs may capture sensitive data, enabling a high-privilege or potentially compromised user to disclose information. Affected product/version scope: Del...