9.8

CVE-2026-67271

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerDell
≫
Produkt PowerStore 500T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 1000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 1200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3200Q
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5200Q
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 7000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 9000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 9200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.384
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
EMC 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities