Description
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Affected products
- Dell / PowerStore0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 1000T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 1200T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 3000T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 3200Q0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 3200T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 5000T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 500T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 5200Q0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 5200T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 7000T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 9000T0 – 4.4.0.0-2692403 or later
- Dell / PowerStore 9200T0 – 4.4.0.0-2692403 or later