8.1

CVE-2026-70415

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerDell
≫
Produkt PowerStore 500T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 1000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 1200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3200Q
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 3200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5200Q
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 5200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 7000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDell
≫
Produkt PowerStore 9000T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
HerstellerDella
≫
Produkt PowerStore 9200T
Default Statusunaffected
Version 0
Version < 5.0.0.2-2761110 or later
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.485
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
EMC 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities